last executing test programs: 59.806990349s ago: executing program 3 (id=2387): syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8}, 0x94) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_setup(0x8, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x80, 0x0, 0x25, 0x2, 0x0, 0xfc}, 0xe) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1dd1ec02e92e85f03d09028a000301ffa006090400000001"], 0x0) fsopen(&(0x7f0000000240)='befs\x00', 0x1) close_range(r2, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/19, 0x13}, 0x1fd}], 0x1, 0x40000040, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000440)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x2, 0x4, [0x6, 0x7, 0x9, 0xd]}, &(0x7f0000000100)=0x10) 56.679053551s ago: executing program 3 (id=2402): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@multicast1, @multicast1}, &(0x7f0000000140)=0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000080000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x10, &(0x7f0000001e00)=""/4087}, 0x90) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r5, 0x1, 0x29, &(0x7f00000001c0)=""/132, &(0x7f00000002c0)=0x84) clock_nanosleep(0x1, 0x1, &(0x7f0000000f40)={0x0, 0x3938700}, 0x0) syz_emit_ethernet(0x2a9, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "19e452", 0x273, 0x11, 0x1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x2b, 0x12, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x10}, @generic={0x7, 0x87, "dfe3b3a1d805f88d73543e7f1d88d2d26c45a6581d05bfb2e658e34d14eaf7060a63a050bb0e36147a07467583460263cf6efccc15f81f0bcc0fa1f45089cefe122de4982cb7f43ef125effdbb211404278ad06c9924e11ae3710e06003ae5c6a7a417f3b68803f1976d6d97eebddf7b3985f55a833bf41e1cd9acd71234f86495691f6a6ffbfe"}]}, @srh={0xc, 0xe, 0x4, 0x7, 0xd, 0x10, 0xffff, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast2, @loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0xc9, 0x0, 0x5, 0x0, 0x0, 0x6, 0x65}, @fragment={0x4, 0x0, 0x5c, 0x0, 0x0, 0x5, 0x66}, @routing={0x29, 0xa, 0x1, 0x18, 0x0, [@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, @dev={0xfe, 0x80, '\x00', 0x1d}]}], {0x4e23, 0x4e20, 0xf3, 0x0, @wg=@data={0x4, 0x3ff, 0xfffffffffffffffe, "eb7216e7d41dc8aced5a7da9681940c36444c40c15284bfe06382a44d8d5e3a59c8690bcc2cf3d64eac91a08dd8677753dfe9f7ba788c38d25de73c3756418ee4a69f0d2f870520d1081da8dd11eca366d12ab6757e30e312f08f6c52e12778e46e8a8ac1773c4e8a9110dc3441e7c5dc5ed36cf339d9483f9d2161d628a251844aeb3ef07fc4b7edea5b49dfcfc5df45758f7ade247b979cb69adc403dc8eb9edb659ec955d6282b16b64819b8e99bd79448f5100f3662c3f3fea0e26e9233acf649942c5f82d1eb456c5a7db19aa3bef6ed313704cd4bcc11088"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) 56.293681153s ago: executing program 4 (id=2404): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000040)=@fd={0x2, 0xe, 0x4, 0x1fff, 0x10003, {}, {0x3, 0x8, 0xfd, 0x4, 0x0, 0x92, "01e0f800"}, 0xfff, 0x2, {0xffffffffffffffff}, 0x18603}) close_range(r2, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0xfffffffffffffffd, 0x101d01) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) socket$kcm(0xa, 0x5, 0x0) r7 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0xd4}}, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r9, &(0x7f0000000140)=ANY=[], 0xb0) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r10, r9, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x64) 55.155642398s ago: executing program 1 (id=2407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x240080c5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffff44}, 0x1c) 54.946970771s ago: executing program 1 (id=2408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x5, 0x7, 0x80000000000, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x800, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES16=r3, @ANYRESHEX=r4, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x7c}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8, @ANYBLOB="010000000000fcffffff0100000000000000014100000018001700000032810000006574683a7866726d30000000"], 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x4000000008000000, 0x0, 0x6}) close(r6) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x6100) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800034000e90001080001400000000305240200020000000900010073797a"], 0x80}}, 0x0) r7 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 54.455592134s ago: executing program 4 (id=2410): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0x4}, {0x0}, {0x0}]}, 0x4}, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x22, 0x7ff, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x4}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r4, 0x541e, &(0x7f0000000040)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r6 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r8 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a600000001d0a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a300000000009000200"], 0x88}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r7, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRES64=r1, @ANYRES8=r10, @ANYRESDEC=r2, @ANYRESHEX=r8], 0x50}, 0x1, 0x0, 0x0, 0x8000851}, 0x20048050) 54.358926894s ago: executing program 3 (id=2411): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @private0={0xfc, 0x0, '\x00', 0x9}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}}, 0x44) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x1000, 0x4, 0x1, 0x0, r5}, 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000d40), 0x0}, 0x20) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x7a, 0x8]}, &(0x7f0000000140)=0x44) r9 = socket$netlink(0x10, 0x3, 0x4) syz_extract_tcp_res(&(0x7f00000001c0), 0x8, 0x0) writev(r9, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000100224e0000", 0x58}], 0x1) syz_emit_ethernet(0x110f, &(0x7f0000002000)=ANY=[@ANYBLOB="00000000000000000000000088fb406511010068000009069078ac1414bbac1414148313f500000000ac1414bbac1e0001ac1e00018917e4ac14142dac1414407f000001ffffffffffffffff00004e234e234406344c791250aba7e1cdc9a646da07287a13ab0ce8613e434d499d3f6b4b9939d39aa6c6bb4b738a40b5a29fe2912707fc00a62ecf492a2549e08184d372bfa4c3b64212b5c7ab296b34f8e25f84eb618c7224573ddb3b4711727a16e77dccc452c6db1bf1fbcad7f7736066c7a6cfb1131777605c3c595b24f797b9535c7ef495653f00", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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"], 0x0) 53.960164873s ago: executing program 0 (id=2412): syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) getdents(r2, &(0x7f0000000fc0)=""/4096, 0x1000) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 53.745805588s ago: executing program 0 (id=2413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) ppoll(&(0x7f0000001100)=[{r0, 0x302}], 0x1, &(0x7f0000001140)={0x77359400}, &(0x7f0000001180)={[0x401]}, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045503, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r2, 0x0) r3 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x8003}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r9, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 53.571183436s ago: executing program 3 (id=2414): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x4, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @local, @empty}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x3, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r10, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x150, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0xffffffff, 0x6, 0xc, 0x3, 0x405, 0x1, 0x4, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0x7ff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x404, 0xa, 0x8, 0x3, 0x9, 0x804d81, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x5, 0x5, 0x80000001, 0x6, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x1, 0x5, 0xe, 0x40000001, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x6, 0xfffffff7, 0x2, 0x3, 0x5, 0x8, 0x80, 0xb, 0x1, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x7ff, 0x6, 0xe, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x8, 0x6, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0xcd16, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x1, 0x8001, 0x7, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3b, 0x8b2, 0x7, 0x4, 0xff, 0x140, 0x0, 0x4, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x40017, 0x8000, 0x11, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x58b, 0x9, 0xc3, 0xffffffff, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x5, 0x1, 0xfffffff3, 0xd077, 0x4, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x2, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xbb, 0x5, 0x29, 0xfffd, 0xd, 0x0, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x88d9, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) getsockopt$bt_hci(r0, 0x84, 0x2, 0x0, &(0x7f0000000000)) 53.243137957s ago: executing program 4 (id=2415): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928afb702800000800030003000000040004"], 0x74}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) 52.706427188s ago: executing program 3 (id=2416): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01e90000ce", 0x5, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb4}}, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r3, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r4 = inotify_init1(0x0) inotify_add_watch(r4, 0x0, 0x400) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100fcfffffffcdbdf350f"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') madvise(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f0000000400)={[0x4ad1]}, &(0x7f0000000440), 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x301500, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 52.606278075s ago: executing program 2 (id=2417): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x400903, 0x148) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) io_setup(0x22, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="4e88c27b37f14ad369be8eb6049655d388bfbfe3f1b68defd35f3bd0c0b3fef90d57d8effcce68b605da37ed5542dc5c0560cc0325fcb9c4bbd1db1d3c670da18e8ed16f1a94aa44746ff52bbd79888f65e3ca7f2b2f8558de206e532fe8fbc8d7dfb30f042d601c68017fe0cbe722a27f18c50905b73655e51276792b52a3ebc6871453b1eac68cff395df009567f99a1f2c53203b1b14f6d93d2324305358b6e54936308cfb8701586748aae0bcbeff324dd2c2701b240ec803920870f43fb3dfe41a945755207", 0xc8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @empty, 0x9a1a}, 0x1c) r2 = inotify_init1(0x80800) splice(r2, &(0x7f0000000200)=0x7ff, r0, &(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000280)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x7, '\x00', 0x0, r0, 0x0, 0x2, 0x3}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x7fffffff, 0x0}, 0x8) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x20, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xc6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x3, 0xb1, &(0x7f0000000480)=""/177, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x3e, r0, 0x8, &(0x7f0000000540)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x3, 0x20000000, 0x9}, 0x10, r4, r5, 0x6, &(0x7f0000000680)=[r0, r0, r0, r0, r1, r7, r0], &(0x7f00000006c0)=[{0x5, 0x2, 0xe}, {0x4, 0x1, 0x7, 0x1}, {0x1, 0x4, 0xb, 0x7}, {0x5, 0x5, 0x7}, {0x0, 0x2, 0xf, 0xc}, {0x2, 0x4, 0xc, 0x7}], 0x10, 0x2}, 0x94) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000800)={@private2, 0x0}, &(0x7f0000000840)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xfff, 0x0, r3, 0x8, '\x00', r8, r6, 0x4, 0x3, 0x5}, 0x50) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000900)) fcntl$setstatus(r2, 0x4, 0x4800) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x8c, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000b00)={{@hyper, 0xfffffffe}, @local, 0x7, 0xffff, 0x6d, 0x80, 0x6, 0x80a08e, 0xffffff00}) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000b40), &(0x7f0000000b80)=0x30) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x2, '\x00', 0x0, r5, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000c80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xfffffff9}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @ldst={0x3, 0x1, 0x1, 0xa, 0x2, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', r8, 0x1b, r0, 0x8, &(0x7f0000000dc0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x5, 0xb, 0x2, 0x80}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x10, 0x7}, 0x94) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), r6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000001040)={'syztnl0\x00', &(0x7f0000000fc0)={'ip6tnl0\x00', r8, 0x4, 0x7, 0x7, 0x6d39, 0x1, @private0, @local, 0x7800, 0x8000, 0xaeb, 0x7}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000001340)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f0000001080)={0x254, r11, 0x200, 0x8, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_OURS={0x1b8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x72, 0x4, "5528a3fedfa0ba611e07be5c7f69c451235f4d1e84577f453abd558422daf6bc2d13511c693376e7f1c4f92ad9c36d2e8da818859202d861bde9390f064af35837352fcd60eb122ca6a1944d6c218b691691dc576f37fba20824f2929118180444c1be732d587fcc4aad29f3c2f3"}, @ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "6f92a5f2504e8dda74365f21f8ac7905fbe8f9e96586ffb37cbbc5c18a60571b3a383db6e9aac4d14a6a394d11fc9e4d909ea81503a4696f2f3bce2511e9d6b3559daa0a89f089fbc410ae77f4414d1b6cb7a079a505f2e715d58d052849eb36115a98c03a341010ce2496bd9401e4a2e570f02388e1ff3209eb435fa97ecabc1633bac38f45dabea277e3c058b35476831c45eb1495c88cf6d5a06a25337fc77e184ab07c0b05c49af6e2b01f5ca21956dd6f177f6390950a4a8106f84edf032475c29d1e9b31c787392cecbe2eb54f4edb8dd7d289141800e25a5ff2852af537669d90"}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, 'h'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) listen(0xffffffffffffffff, 0x48) 52.274737059s ago: executing program 0 (id=2418): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7fff7ffc}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) utimes(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000004c0)={{0x77359400}, {0x77359400}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) sendmmsg$sock(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000000200)="412ffc0af731cebe059a464a973ed0bd02937dfd1ef62f634e8f0cbf64dc20f8b2fead652915a2bd05d57353bbf0b279d96b1739dd729501", 0x38}, {&(0x7f0000000400)="e7642643977f666c2ba9e92a58c661506945749b47a13e924bab299dcd38ce6a1ec321ac53f52cfb573023fd0c8d251eabfd509c2a1973e1028fd9debdccb3809115a21158b06f64cb1a3dd3362727e32e3f260ab58e5b43fd49728df9a36a2d9047109e8427e6ef2a5216de96324e9fe6f735809775ed00639a2aa034b305e180fcb492ec62f52052d62dfd2b", 0x8d}, {&(0x7f0000003580)="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", 0x1000}, {&(0x7f0000000580)="b8bab0aa70ea511cb1bcd2199e906defdf8674ba5de24a06096ba1de61a051b67ecbfdf619cf72c710b92ac388bd89435ee2a55e26ffa1aa81b77817d8c27eb689022a2c1b0ca8424e634378dcaee8beecb139bb2b9980f4e6d514910609ba5070a9108ca2aa0d530ba9bcc71f335a5e96ea2ce24a1329a4b35e813cc1d8f037e7314177d44fc2ddb075c9e3ce01b54fb6aa35ea4e5a6cb54f4c1799b5bdfe3736092af28d73d3b3f10ea13722869e2ff4", 0xb1}, {&(0x7f0000000300)="175f087af9eda66bc20d63751867a4baa7c980", 0x13}, {&(0x7f0000000800)="3ba71559a3c0fd0f6d9b6fa31a88b1a838f66a7a3a47c2fe90f07d52a76478251838da7ec26646798d0a83ace5d54071aaec29b91a4a6c561ff7766e26f20b203a3f60cc5e87edd1e9292b0a0dceada6246c9188bc0db67dab48f1f1ba22a63912928f46d0c6b48f0fa734895efa2d02b68750bc7e48cc750e6794434093f3d3859f3f8a9613719955607cc3c753d687358b7266054e7b9e5ba79bf1d357feda48cb91f6b42f12d49f98e76afcbcb918345a339c1cc173b35650cde93dee1d57c9ca6dfff33cee2c9327b019a9f931cfa0aaeb6691204ad22062779bbd0caabd66d9618044d9917e1993d479c15914e4444467b852", 0xf5}, {&(0x7f0000000900)="9458074cf5cb88025da72ce7c9294dc1015c539c1c58e6a39c574ee4b1fc03bcba72178226822b6e719feb6fc76e66aa09e624a8cf249d500b43e4766d9ea624c81ebf4c150a613d1005404d7a2bfd332f1e83371d6903bf2dc9d9e12c93c5f9f8ed4bd6c5e3e4f456ca2a8f4814e9e34f82ca7399f182d8bed8f0199fa16c62352b272b47b00ed448b15a70f294d57c5a4777486bb81d144805c05c3c4ecd2144c64bcedf790fa9a0d31be056e4d4f059b88ae5f8dcc39fb8a96be3ac32fa10cab9675a310c75e3dcbc17bddf7ba319117d4f6f93bfa6966fa28decb67d3f1858af33585cf85d75477d59d4247dd1838d4cfbf890a3e2", 0xf7}], 0x8, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xe57c}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="4476dade6c30f0a92a093e1e801d1eb15a8e38d6ab1679cdceaf866b59043368a738a708cc833775ce4207265ce9a6fe77909d965af85cc1333e872dc982a562bf5238df7dc7c60ff807a9d313a4c39393a2eed7e804aa2d5e3e6643237da129a232946791655f768c1ceac04464d70b1379d4cdd572d811169b119957b380e61af96db8d80d008822b9c0716a75bb5eebf474d0b69d3b77d85854a9d11fe3291fb74a70d1589c8d203315325bd7ee0c617f384aaa44079e16d63247ef3caa61c20ab7ff42c5545f0f2b6a2c799605acf1b280a5c0900287932b35ae2d230027179579d572fbab327f", 0xe9}, {&(0x7f0000000700)="e35e229f1c2d2b293ece4f8e7d2b8ae063974be489223af2273a9e86e6372adfff94828a9c9bc6a7c8aa1e0e01f3d4ac1e735a0dddeeb5e8ef5510ab9c6f5a72d1ea247d3ac79b1fa48990e233351c69a7a1c3387c912372101c5270a57783efe51cdcf05953aa3f2c73934e1155afd6bbdcce105495fe4173055d90d0fb96b527d579a5e65da4aceab7e88ae5fdbcd5300bd23db51c60f875a496766222dff50fc451260ae3182c05ee1762c632be01bfe5a1b8921a13f708d3", 0xba}, {&(0x7f0000000640)="06222d8afeb2a92318a59646963c808176fe3fc2a4ecd7efb10202be43368a76d5ae23618fdd16c4f836df2a8976633357dcc49d6b2b", 0x36}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)="48209bdc30f60b6971cd495b5bc4a35175bbdb20661c9b3943f78f75e6b50e36ab122e36d4f5c30fca45f4", 0x2b}, {&(0x7f0000000b40)="4c59471369c2f4429cdf0f26a4ae1815165b69c5a470966199d4f19a25369ee9414b4d6d20e3ecb346f668f601c8139617342d72a182a2fe85795646db864e6254dee9554051dafbb0fc0620663432176f1d1dbd5850742ff3d98d299e8d6ca958ecd32b405766efb95a3d20de8e65702f222db6cded2419bfd60949cd53b3baf1d165c9b5e94fa978b526117843c396f4cbfd10696f06d1a58279345a80f2fcfbb2", 0xa2}, {&(0x7f0000004580)="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", 0xc00}], 0x3, &(0x7f0000000c40)=[@mark={{0x14, 0x1, 0x24, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0xb00}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xd8}}], 0x3, 0x8080) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r2) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000014c0)={0x24, &(0x7f00000006c0)={0x20, 0x4, 0x2, {0x2, 0x8}}, &(0x7f00000013c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "1d0cbfd2ea86921e56a2a28453fb719e740c688b2ce3995b26f13b6702e67b4478d931c926961bb860d06ff6f024eb4fdeeabd7815af6a428797b3a56364f234f226a57144ca429eab12a5d7266b04f3812bc301ea45475311f72040d1c89177c24f695d1a8d96a2a66f696df2cd80b009601efd72365c6770d0d7bc2fae856bea42ce"}}, 0x0, &(0x7f0000001480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0xaef}}}}, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030301630303030303032303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 52.274246297s ago: executing program 2 (id=2419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54ae7968c690aa67f20000000000000005ff00af795b48d4576d836fc62fede3cc000900020073797a310000000005000100070000002c000780400004404e21000005000700e30000000c000180153583f63d35e4700c000280084a292febed025ca7ff2e6cd906a1c767273e2f71"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unshare(0x24060400) close(0x3) listen(0xffffffffffffffff, 0xf5db) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x5, 0x8}) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000140)={0x3, 0x1, 0x46}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r6, 0x0, 0x0) lseek(r1, 0x10001, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000300)={0x0, "12be9cd6285c77966b2d333c5f90547b"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001300)={r7, 0x8, 0x9}) 51.55889605s ago: executing program 2 (id=2420): splice(0xffffffffffffffff, &(0x7f0000000040)=0x9, 0xffffffffffffffff, &(0x7f0000000140)=0xb52, 0xdbc0, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x1c, r3, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xfd}]}, 0x1c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x1, 0x6, {{0x1c, 0x4, 0x0, 0x12, 0x70, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @remote, {[@cipso={0x86, 0x13, 0x0, [{0x5, 0xd, "b5f2570599403f22bff769"}]}, @lsrr={0x83, 0x3, 0xae}, @timestamp={0x44, 0x28, 0xe3, 0x0, 0x9, [0x6, 0x6, 0x8, 0x4, 0x3, 0x8, 0x0, 0x1, 0x7]}, @cipso={0x86, 0x1e, 0x0, [{0x5, 0x8, "2cb39e4746b2"}, {0x5, 0x10, "9f7f578bcd6bfcf23198ef8eb67c"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x4, 0x8000000, 0x40, @private2, @remote, 0x8000, 0xf828, 0x10000, 0x2}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @empty, @initdev}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r7}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000f80)={0x328, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "0f483d8c2eeaa4877ed0f936ba290b43"}, @ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x0, 0x5, "03f205f00d34f2ef7617ab12a2687b59607af14c83b4599d458842e8fdce57026c6f00aeda37cd240a7d89007ff7a8919935c0523642a57fb8e67adc9e6cf270e0888538fd7e25881f5c3efbaead764dd714fa1b54fba7a8300c278f85dcdeb9a9ac8d2bba4ec4a9853413b8426c5149804f4668ce7132e80d4b7a8e2d2d754a8ea7fd136a5aba9d41d75446e38a5f17868d6c6b6d2891fd2b7d5a2e18f0a4d32a2f0e1cefbea84c7f78bd504e53ce37ed681b79936345b5810a71ea1f95f16f8bafc9177cfc66c5a22b055e4eaf3e15c872"}, @ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x245d}, @ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "0623ce000fe6130aa033442ce724d2ae80e018693f7ddd65aa38e303b02d141380a60848954cb6e0ee97bc5f4306a29b9771d9282ad6112fc9a911307f62e6434d94e1a76be5fe414f868005d440282004cccc566da6648df822a525253e38d74734e8fda137a1cc51fbd51d7e27e16969042bc6e3c27fd0a146b4ecd7c40ecd64ef9d51a8708828651aae168be34c33696baa7c58ff198650033b4cc953660e459e478686df62bb26fab7966c8afd7b1dfc5814936d721246f753576baa9ec79cb6d21412ab7c435629fa62d01dfd046e0093cd80be5b019376d3933c8e8a1d61ab17f6d6e82405c4465796e388da572fe482061ea880b415"}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pagemap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0xfd8b, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '$-*,F(@-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x52, 0x5, "8f3df063f7d53fd78de8737979306cae720a7be035b64deade7e15977669ef4166463880b466ac6c108aeaa663782f1bee6f5cf2d90f4a51b517b681c15344bc1eda1d16bd59b2bdd92ce661208a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x7, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'jsr0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '@[)@&\\\x8f+\xaf)+-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, &(0x7f0000000080)=[{0xffffffffffffdff6, 0x20006, 0xfffffffffffffffc}], 0xfdfd, 0x29, 0x0, 0x2, 0x7}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x34, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x81}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 51.263774514s ago: executing program 1 (id=2421): syz_emit_ethernet(0x413, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f3eff8", 0x3dd, 0x2f, 0xff, @remote, @dev={0xfe, 0x80, '\x00', 0x1a}, {[@routing={0x88, 0x2, 0x1, 0x8, 0x0, [@empty]}, @hopopts={0x1d, 0xc, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0xc, [0x200, 0x0, 0x101, 0x3, 0x2]}}, @ra={0x5, 0x2, 0x98}, @ra={0x5, 0x2, 0x5}, @generic={0x2, 0x25, "ce062cd99efcf2d1dc359a7070eea56a65ee224bc1ceca5a87c03267d18a6d69594d37af17"}]}, @srh={0x87, 0x8, 0x4, 0x4, 0x1, 0x50, 0xf, [@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xe7, 0x1, [0x3, 0x0], "a9dda2fc495ef565c81319599fb1762daaf0085dc13c74c4e638293f825ece13506d6022cb1a9505200355e6df5db728fe1d58ce7676886a84b3c91c886cd40e3f509fa1c20a21bf59cafc45f287aa6995044364f073c20f61115a5fceca38d9ed8a9c16848707b73f33d695158917333db1ebdbc896b36a77670dc50449ca99863eee29604ce3c0fcc3f9abf65f25d4f78bb6032e7e2e6b32eeb2e0c185b0138f4f38ef1a70d1b6908896dd4311c917c82f19ec9e1669c1b9f83c1d228d66d4240c25b086ad2cdada78e0431ab24dbb0660359773b611f1aaed72298b3b795237b2fb12d17616"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "87dd11a9e5250990ec30a1846a0520ce47ab8f9d6ac167e2e7f4cc309f196432a6f8ad6832777ddbdafab8ea1b167f762fcb94bef124b5c9efffe700eefcbd2c96c964e462d22f4be18fe008fc7fa6096166f57fbf5fb400bed6a11185297c9a13c186a410c284700180f99ce363ba3ab84ffacf81c3cf1da763e2db52b9ae8d69e17e7d52bfd8e7990fca6032c2aa33bf199581a3c09e1ad31da90ba40b91a37bd98c8706a6cc7dca10e0ee3bef87ad759d5f621118b03c67358ba8679f88e3df47540b64"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x9a58], "d77596e720482e2a1b83be42243eac8df0f665f797547b6339b4"}, {0x8, 0x88be, 0x3, {{0xf, 0x1, 0x71, 0x0, 0x1, 0x0, 0x3, 0x4}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x6, 0x1, 0x0, 0x1, 0x1, 0xfe}, 0x2, {0x4, 0x2, 0x1, 0x10, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}}, 0x0) 51.06221919s ago: executing program 4 (id=2422): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) (async) fsopen(0x0, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x4, 0xe, 0x4, 0x7fff, 0xf, 0xe}) (async) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000180)={0x10001e, 0x100074, 0x40000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) (async) bind$rds(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 51.022755409s ago: executing program 2 (id=2423): syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) getdents(r2, &(0x7f0000000fc0)=""/4096, 0x1000) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 50.993651667s ago: executing program 1 (id=2424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 50.862980635s ago: executing program 2 (id=2425): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) sendto$inet6(r0, &(0x7f0000000040)="d30ec3b1a20a", 0x6, 0x800, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x9}, 0x1c) (fail_nth: 10) 50.202318216s ago: executing program 1 (id=2426): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x40802) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)='g', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="4cce76b4bf0d84c8e57a0d81e892340043774215631300d4445c523e454ba62abc233043d69122946e4b7fed54d7f29900eea4bc793624cbcc198ceb2c16c39876abfd985aad2b31cd9e9683c35914d64e8f28b0de48e476b9", 0x59}], 0x1, &(0x7f0000000840)=ANY=[], 0x88}}], 0x3, 0x4008000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0xb) listen(r2, 0x10001) shutdown(r0, 0x2) 50.07610301s ago: executing program 2 (id=2427): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) fsopen(&(0x7f0000000200)='binfmt_misc\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4004841) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, r5, 0xac6a3b6d1feaaf8b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa0100ff}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x80, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x58) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) 49.712808057s ago: executing program 1 (id=2428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0xfff, 0x4) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x48, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x4c, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}}, 0x20000000) unshare(0x2c020400) r7 = msgget$private(0x0, 0x240) msgsnd(r7, &(0x7f0000000200)=ANY=[@ANYRES32=r5], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2208c0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socket$unix(0x1, 0x5, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@deltclass={0x30, 0x29, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0xa, 0x3}, {0x10, 0x10}}, [@tclass_kind_options=@c_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x4815) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r10, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r10, 0x40505412, &(0x7f0000000300)={0x5, 0x8}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r10, 0x40505412, &(0x7f0000000140)={0x5, 0x6f, 0x9, 0x0, 0x6}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) 49.712149597s ago: executing program 0 (id=2429): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) 49.363128663s ago: executing program 4 (id=2430): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0x20}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@multicast2, @loopback, @empty}, 0xc) 49.351033357s ago: executing program 0 (id=2431): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r1, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 49.223370334s ago: executing program 3 (id=2432): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xe, 0x7d, {0x7d, 0x30, "3a25b93b0e11a81e92aab7364a6b9c9fad168a6d02c3ac78e20ee4fcbb82c4c116e6e814cc9033d7c19fd8f70ae1fed5a57801a6edc183d425197fa06f6e9bd9c6178a04211252ed2f51f9bc13162283fb35d9acbc5d76e299039e2304944535be6297f41ea02b1b9ab877af51eeb3435eb6f9e1c3b237a9802f7b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x14, 0xa6, "00f29d1885edcc525ddacfb0f06644691d9a5cd611fe52e8ed270d5084229d083a9ab0c72387309b11617fff45b9f0c8cdeeb15f61dc9a88a221c8ae9e92bedd2ff7615cf8cb3221c58c0daa88733c7f57335a945f52036016e6368b313c9357ca1ad0cd0a5541004062c310bdf9e520009b19dd5cf4167633227108dfb117d6991b75425bbe5a9f8d5a8f59f2f5ecb0764fbd4884c44cae066644c5246de8b9bd5d66f9939a"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x81, 0x1, 'R'}, &(0x7f00000002c0)={0x20, 0x82, 0x3, "a50679"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "01d9"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "0310c3"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "bf01f3"}}) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xe, 0x7d, {0x7d, 0x30, "3a25b93b0e11a81e92aab7364a6b9c9fad168a6d02c3ac78e20ee4fcbb82c4c116e6e814cc9033d7c19fd8f70ae1fed5a57801a6edc183d425197fa06f6e9bd9c6178a04211252ed2f51f9bc13162283fb35d9acbc5d76e299039e2304944535be6297f41ea02b1b9ab877af51eeb3435eb6f9e1c3b237a9802f7b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x14, 0xa6, "00f29d1885edcc525ddacfb0f06644691d9a5cd611fe52e8ed270d5084229d083a9ab0c72387309b11617fff45b9f0c8cdeeb15f61dc9a88a221c8ae9e92bedd2ff7615cf8cb3221c58c0daa88733c7f57335a945f52036016e6368b313c9357ca1ad0cd0a5541004062c310bdf9e520009b19dd5cf4167633227108dfb117d6991b75425bbe5a9f8d5a8f59f2f5ecb0764fbd4884c44cae066644c5246de8b9bd5d66f9939a"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x81, 0x1, 'R'}, &(0x7f00000002c0)={0x20, 0x82, 0x3, "a50679"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "01d9"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "0310c3"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "bf01f3"}}) (async) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) (async) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) (async) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) (async) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 49.078875998s ago: executing program 0 (id=2433): splice(0xffffffffffffffff, &(0x7f0000000040)=0x9, 0xffffffffffffffff, &(0x7f0000000140)=0xb52, 0xdbc0, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x1c, r3, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xfd}]}, 0x1c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x1, 0x6, {{0x1c, 0x4, 0x0, 0x12, 0x70, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @remote, {[@cipso={0x86, 0x13, 0x0, [{0x5, 0xd, "b5f2570599403f22bff769"}]}, @lsrr={0x83, 0x3, 0xae}, @timestamp={0x44, 0x28, 0xe3, 0x0, 0x9, [0x6, 0x6, 0x8, 0x4, 0x3, 0x8, 0x0, 0x1, 0x7]}, @cipso={0x86, 0x1e, 0x0, [{0x5, 0x8, "2cb39e4746b2"}, {0x5, 0x10, "9f7f578bcd6bfcf23198ef8eb67c"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x4, 0x8000000, 0x40, @private2, @remote, 0x8000, 0xf828, 0x10000, 0x2}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @empty, @initdev}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r7}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000f80)={0x328, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "0f483d8c2eeaa4877ed0f936ba290b43"}, @ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x0, 0x5, "03f205f00d34f2ef7617ab12a2687b59607af14c83b4599d458842e8fdce57026c6f00aeda37cd240a7d89007ff7a8919935c0523642a57fb8e67adc9e6cf270e0888538fd7e25881f5c3efbaead764dd714fa1b54fba7a8300c278f85dcdeb9a9ac8d2bba4ec4a9853413b8426c5149804f4668ce7132e80d4b7a8e2d2d754a8ea7fd136a5aba9d41d75446e38a5f17868d6c6b6d2891fd2b7d5a2e18f0a4d32a2f0e1cefbea84c7f78bd504e53ce37ed681b79936345b5810a71ea1f95f16f8bafc9177cfc66c5a22b055e4eaf3e15c872"}, @ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x245d}, @ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "0623ce000fe6130aa033442ce724d2ae80e018693f7ddd65aa38e303b02d141380a60848954cb6e0ee97bc5f4306a29b9771d9282ad6112fc9a911307f62e6434d94e1a76be5fe414f868005d440282004cccc566da6648df822a525253e38d74734e8fda137a1cc51fbd51d7e27e16969042bc6e3c27fd0a146b4ecd7c40ecd64ef9d51a8708828651aae168be34c33696baa7c58ff198650033b4cc953660e459e478686df62bb26fab7966c8afd7b1dfc5814936d721246f753576baa9ec79cb6d21412ab7c435629fa62d01dfd046e0093cd80be5b019376d3933c8e8a1d61ab17f6d6e82405c4465796e388da572fe482061ea880b415"}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pagemap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0xfd8b, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '$-*,F(@-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x52, 0x5, "8f3df063f7d53fd78de8737979306cae720a7be035b64deade7e15977669ef4166463880b466ac6c108aeaa663782f1bee6f5cf2d90f4a51b517b681c15344bc1eda1d16bd59b2bdd92ce661208a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x7, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'jsr0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '@[)@&\\\x8f+\xaf)+-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, &(0x7f0000000080)=[{0xffffffffffffdff6, 0x20006, 0xfffffffffffffffc}], 0xfdfd, 0x29, 0x0, 0x2, 0x7}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x34, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x81}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 49.078409605s ago: executing program 4 (id=2434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000009, 0xffffffff, 0x0, 0x0, 0x2, 0x7fffffff, 0x203, 0x2}, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000140)=@ng={0x4, 0x7, "c31412110e71fe31a106fcdc7de375"}, 0x11, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.353265608s ago: executing program 32 (id=2433): splice(0xffffffffffffffff, &(0x7f0000000040)=0x9, 0xffffffffffffffff, &(0x7f0000000140)=0xb52, 0xdbc0, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x1c, r3, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xfd}]}, 0x1c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x1, 0x6, {{0x1c, 0x4, 0x0, 0x12, 0x70, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @remote, {[@cipso={0x86, 0x13, 0x0, [{0x5, 0xd, "b5f2570599403f22bff769"}]}, @lsrr={0x83, 0x3, 0xae}, @timestamp={0x44, 0x28, 0xe3, 0x0, 0x9, [0x6, 0x6, 0x8, 0x4, 0x3, 0x8, 0x0, 0x1, 0x7]}, @cipso={0x86, 0x1e, 0x0, [{0x5, 0x8, "2cb39e4746b2"}, {0x5, 0x10, "9f7f578bcd6bfcf23198ef8eb67c"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x4, 0x8000000, 0x40, @private2, @remote, 0x8000, 0xf828, 0x10000, 0x2}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @empty, @initdev}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r7}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000f80)={0x328, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "0f483d8c2eeaa4877ed0f936ba290b43"}, @ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x0, 0x5, "03f205f00d34f2ef7617ab12a2687b59607af14c83b4599d458842e8fdce57026c6f00aeda37cd240a7d89007ff7a8919935c0523642a57fb8e67adc9e6cf270e0888538fd7e25881f5c3efbaead764dd714fa1b54fba7a8300c278f85dcdeb9a9ac8d2bba4ec4a9853413b8426c5149804f4668ce7132e80d4b7a8e2d2d754a8ea7fd136a5aba9d41d75446e38a5f17868d6c6b6d2891fd2b7d5a2e18f0a4d32a2f0e1cefbea84c7f78bd504e53ce37ed681b79936345b5810a71ea1f95f16f8bafc9177cfc66c5a22b055e4eaf3e15c872"}, @ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x245d}, @ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "0623ce000fe6130aa033442ce724d2ae80e018693f7ddd65aa38e303b02d141380a60848954cb6e0ee97bc5f4306a29b9771d9282ad6112fc9a911307f62e6434d94e1a76be5fe414f868005d440282004cccc566da6648df822a525253e38d74734e8fda137a1cc51fbd51d7e27e16969042bc6e3c27fd0a146b4ecd7c40ecd64ef9d51a8708828651aae168be34c33696baa7c58ff198650033b4cc953660e459e478686df62bb26fab7966c8afd7b1dfc5814936d721246f753576baa9ec79cb6d21412ab7c435629fa62d01dfd046e0093cd80be5b019376d3933c8e8a1d61ab17f6d6e82405c4465796e388da572fe482061ea880b415"}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pagemap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0xfd8b, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '$-*,F(@-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x52, 0x5, "8f3df063f7d53fd78de8737979306cae720a7be035b64deade7e15977669ef4166463880b466ac6c108aeaa663782f1bee6f5cf2d90f4a51b517b681c15344bc1eda1d16bd59b2bdd92ce661208a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x7, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'jsr0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '@[)@&\\\x8f+\xaf)+-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, &(0x7f0000000080)=[{0xffffffffffffdff6, 0x20006, 0xfffffffffffffffc}], 0xfdfd, 0x29, 0x0, 0x2, 0x7}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x34, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x81}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 19.781133182s ago: executing program 33 (id=2428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0xfff, 0x4) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x48, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x4c, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}}, 0x20000000) unshare(0x2c020400) r7 = msgget$private(0x0, 0x240) msgsnd(r7, &(0x7f0000000200)=ANY=[@ANYRES32=r5], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2208c0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socket$unix(0x1, 0x5, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@deltclass={0x30, 0x29, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0xa, 0x3}, {0x10, 0x10}}, [@tclass_kind_options=@c_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x4815) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r10, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r10, 0x40505412, &(0x7f0000000300)={0x5, 0x8}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r10, 0x40505412, &(0x7f0000000140)={0x5, 0x6f, 0x9, 0x0, 0x6}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) 19.780967786s ago: executing program 34 (id=2427): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) fsopen(&(0x7f0000000200)='binfmt_misc\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4004841) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, r5, 0xac6a3b6d1feaaf8b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa0100ff}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x80, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x58) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) 13.517942445s ago: executing program 35 (id=2432): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xe, 0x7d, {0x7d, 0x30, "3a25b93b0e11a81e92aab7364a6b9c9fad168a6d02c3ac78e20ee4fcbb82c4c116e6e814cc9033d7c19fd8f70ae1fed5a57801a6edc183d425197fa06f6e9bd9c6178a04211252ed2f51f9bc13162283fb35d9acbc5d76e299039e2304944535be6297f41ea02b1b9ab877af51eeb3435eb6f9e1c3b237a9802f7b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x14, 0xa6, "00f29d1885edcc525ddacfb0f06644691d9a5cd611fe52e8ed270d5084229d083a9ab0c72387309b11617fff45b9f0c8cdeeb15f61dc9a88a221c8ae9e92bedd2ff7615cf8cb3221c58c0daa88733c7f57335a945f52036016e6368b313c9357ca1ad0cd0a5541004062c310bdf9e520009b19dd5cf4167633227108dfb117d6991b75425bbe5a9f8d5a8f59f2f5ecb0764fbd4884c44cae066644c5246de8b9bd5d66f9939a"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x81, 0x1, 'R'}, &(0x7f00000002c0)={0x20, 0x82, 0x3, "a50679"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "01d9"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "0310c3"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "bf01f3"}}) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xe, 0x7d, {0x7d, 0x30, "3a25b93b0e11a81e92aab7364a6b9c9fad168a6d02c3ac78e20ee4fcbb82c4c116e6e814cc9033d7c19fd8f70ae1fed5a57801a6edc183d425197fa06f6e9bd9c6178a04211252ed2f51f9bc13162283fb35d9acbc5d76e299039e2304944535be6297f41ea02b1b9ab877af51eeb3435eb6f9e1c3b237a9802f7b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x14, 0xa6, "00f29d1885edcc525ddacfb0f06644691d9a5cd611fe52e8ed270d5084229d083a9ab0c72387309b11617fff45b9f0c8cdeeb15f61dc9a88a221c8ae9e92bedd2ff7615cf8cb3221c58c0daa88733c7f57335a945f52036016e6368b313c9357ca1ad0cd0a5541004062c310bdf9e520009b19dd5cf4167633227108dfb117d6991b75425bbe5a9f8d5a8f59f2f5ecb0764fbd4884c44cae066644c5246de8b9bd5d66f9939a"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x81, 0x1, 'R'}, &(0x7f00000002c0)={0x20, 0x82, 0x3, "a50679"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "01d9"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "0310c3"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "bf01f3"}}) (async) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) (async) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) (async) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) (async) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 0s ago: executing program 36 (id=2434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000009, 0xffffffff, 0x0, 0x0, 0x2, 0x7fffffff, 0x203, 0x2}, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000140)=@ng={0x4, 0x7, "c31412110e71fe31a106fcdc7de375"}, 0x11, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): p=0x7fb43018e929 code=0x7ffc0000 [ 545.688539][ T5831] usb 1-1: Limiting number of CPorts to U8_MAX [ 545.701528][ T5831] usb 1-1: Unknown endpoint type found, address 0x07 [ 545.714014][ T30] audit: type=1326 audit(1751472909.297:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 545.748431][T12623] I/O error, dev loop7, sector 1064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 545.758739][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 545.767128][T12623] buffer_io_error: 14 callbacks suppressed [ 545.767141][T12623] Buffer I/O error on dev loop7, logical block 133, async page read [ 545.785902][T12623] I/O error, dev loop7, sector 1064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 545.797946][T12623] Buffer I/O error on dev loop7, logical block 133, async page read [ 545.807033][ T5831] usb 1-1: Not enough endpoints found in device, aborting! [ 545.871550][T12623] I/O error, dev loop7, sector 1064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 545.884784][T12623] Buffer I/O error on dev loop7, logical block 133, async page read [ 545.939966][T12620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.950181][ T43] usb 5-1: USB disconnect, device number 82 [ 545.958675][T12620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.974102][T12621] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 545.997262][ T5891] usb 3-1: USB disconnect, device number 73 [ 546.028435][ T30] audit: type=1326 audit(1751472909.297:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 546.101306][ T30] audit: type=1326 audit(1751472909.297:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 546.141511][T12621] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 546.243035][T12621] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 546.273851][T12621] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 546.344605][T12621] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 546.412848][ T30] audit: type=1326 audit(1751472909.297:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 546.477158][T12621] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 546.560305][ T30] audit: type=1326 audit(1751472909.297:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 546.571798][T12621] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 546.593857][T12621] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 546.621143][T12621] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 0 [ 546.781434][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 546.830911][ T30] audit: type=1326 audit(1751472909.297:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 546.936875][ T30] audit: type=1326 audit(1751472909.297:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 547.020820][ T30] audit: type=1326 audit(1751472909.297:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 547.526986][T12661] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 547.526986][T12661] The task syz.1.2099 (12661) triggered the difference, watch for misbehavior. [ 547.619384][T12664] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 547.785406][ T5831] usb 1-1: USB disconnect, device number 81 [ 547.831502][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 548.111598][ T5891] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 548.506182][ T5891] usb 4-1: config 0 has no interfaces? [ 548.580030][ T5891] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 548.590358][T12685] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[12685] [ 548.858707][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.866891][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 548.891721][ T5891] usb 4-1: Product: syz [ 548.896175][ T5891] usb 4-1: Manufacturer: syz [ 548.901053][ T5891] usb 4-1: SerialNumber: syz [ 548.928910][ T5891] usb 4-1: config 0 descriptor?? [ 549.023096][T12676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 549.076062][T12676] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 549.121654][T12676] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.127832][T12676] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 549.268226][T12676] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.299637][T12676] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 549.530386][T12676] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.537285][T12676] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 549.901450][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 550.462424][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 550.562771][ T5899] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 550.736675][ T5899] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 550.751143][ T5899] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 550.776211][ T5899] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.788981][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.863781][ T43] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 550.898526][T12683] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 550.911395][ T5899] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 550.941436][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 551.001685][ T5891] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 551.041782][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 551.049852][ T43] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 551.096550][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.159070][ T5899] usb 1-1: USB disconnect, device number 82 [ 551.171327][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.191713][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 551.218591][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.231443][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.239758][ T43] usb 3-1: Product: syz [ 551.244310][ T43] usb 3-1: Manufacturer: syz [ 551.249085][ T43] usb 3-1: SerialNumber: syz [ 551.272401][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 551.310380][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 551.341991][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 551.431189][ T5831] usb 4-1: USB disconnect, device number 72 [ 551.484776][ T5891] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 551.520675][ T5891] usb 5-1: config 7 has no interface number 0 [ 551.551617][ T5891] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 551.564465][ T5891] usb 5-1: config 7 interface 187 has no altsetting 0 [ 551.581608][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 551.619427][ T5891] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 551.981476][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 552.136021][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.151565][ T5891] usb 5-1: Product: syz [ 552.158744][ T5891] usb 5-1: Manufacturer: syz [ 552.224990][ T5891] usb 5-1: SerialNumber: syz [ 552.266190][T12713] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 552.541812][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 552.546102][ T5891] usb 5-1: Limiting number of CPorts to U8_MAX [ 552.656783][ T5891] usb 5-1: Unknown endpoint type found, address 0x07 [ 552.678173][ T5891] usb 5-1: Not enough endpoints found in device, aborting! [ 552.850163][T12726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2114'. [ 552.956298][T12713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.965953][T12713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.021451][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 553.261504][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 553.421740][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 553.661528][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 554.061513][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 554.354011][ T5917] usb 5-1: USB disconnect, device number 83 [ 554.567735][ T43] usb 3-1: 0:2 : does not exist [ 554.740131][ T43] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 554.754133][ T5891] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 554.807359][ T43] usb 3-1: USB disconnect, device number 74 [ 554.911578][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 554.920880][ T5891] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 554.956880][T12759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.965749][ T5891] usb 2-1: config 0 has no interface number 0 [ 554.987040][ T5891] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 555.045899][ T5891] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 555.101448][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 555.124354][ T5891] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 555.185309][ T5891] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 555.261837][ T5891] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 555.326624][ T5891] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 555.336147][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.344723][ T5891] usb 2-1: Product: syz [ 555.348950][ T5891] usb 2-1: Manufacturer: syz [ 555.354045][ T5891] usb 2-1: SerialNumber: syz [ 555.368123][ T5891] usb 2-1: config 0 descriptor?? [ 556.085118][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 556.085149][ T30] audit: type=1326 audit(1751472919.857:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472ed8e929 code=0x7ffc0000 [ 556.141439][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 556.174471][ T30] audit: type=1326 audit(1751472919.887:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472ed8e929 code=0x7ffc0000 [ 556.240876][ T30] audit: type=1326 audit(1751472919.887:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f472ed8e929 code=0x7ffc0000 [ 556.289272][ T30] audit: type=1326 audit(1751472919.887:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472ed8e929 code=0x7ffc0000 [ 556.514860][ T30] audit: type=1326 audit(1751472919.887:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472ed8e929 code=0x7ffc0000 [ 556.651480][ T30] audit: type=1326 audit(1751472919.887:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472ed8e929 code=0x7ffc0000 [ 556.831140][ T30] audit: type=1326 audit(1751472919.887:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f472ed8e929 code=0x7ffc0000 [ 556.895196][ T30] audit: type=1326 audit(1751472919.887:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472ed8e929 code=0x7ffc0000 [ 556.971847][ T30] audit: type=1326 audit(1751472919.887:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472ed8e929 code=0x7ffc0000 [ 557.048782][ T30] audit: type=1326 audit(1751472919.887:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12771 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f472ed8e929 code=0x7ffc0000 [ 557.181722][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 558.221646][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 558.499938][ T5891] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 558.584448][ T5891] usb 2-1: USB disconnect, device number 63 [ 559.261446][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 559.672191][T12820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2140'. [ 559.699471][T12822] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[12822] [ 560.301461][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 560.810960][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2144'. [ 560.830457][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2144'. [ 561.341515][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 561.405777][T12818] program syz.2.2139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.781574][ T5917] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 561.942115][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 561.972887][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 562.002884][ T5917] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 562.054681][ T5917] usb 1-1: config 7 has no interface number 0 [ 562.110418][T12846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2146'. [ 562.206195][ T5917] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 562.268203][ T5917] usb 1-1: config 7 interface 187 has no altsetting 0 [ 562.359864][ T5917] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 562.370400][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.379431][ T5917] usb 1-1: Product: syz [ 562.383882][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 562.395740][ T5917] usb 1-1: Manufacturer: syz [ 562.400418][ T5917] usb 1-1: SerialNumber: syz [ 562.414492][T12838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 562.670174][ T5917] usb 1-1: Limiting number of CPorts to U8_MAX [ 562.682837][ T5917] usb 1-1: Unknown endpoint type found, address 0x07 [ 562.689673][ T5917] usb 1-1: Not enough endpoints found in device, aborting! [ 563.107642][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.114190][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.421426][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 563.911199][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2152'. [ 564.007495][ T43] usb 1-1: USB disconnect, device number 83 [ 564.461451][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 565.176173][ T5917] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 565.243402][T12895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 565.336102][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 565.421773][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 565.440004][T12878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.449437][T12878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.483057][T12878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.494031][T12878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.511442][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 565.557508][T12878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.772113][T12878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.877672][T12878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.949308][T12878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.211731][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2159'. [ 566.248164][T12878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.262005][T12878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.331723][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 566.347499][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 566.361584][ T5917] usb 1-1: can't read configurations, error -71 [ 566.483079][T12901] syz_tun: entered promiscuous mode [ 566.528817][T12901] batadv_slave_0: entered promiscuous mode [ 566.541533][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 566.552494][T12901] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 566.569310][T12901] Cannot create hsr debugfs directory [ 566.583027][T12901] hsr1: entered allmulticast mode [ 566.601071][T12901] syz_tun: entered allmulticast mode [ 566.631804][T12901] batadv_slave_0: entered allmulticast mode [ 566.848313][T12912] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2163'. [ 567.155802][T12921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2165'. [ 567.165728][ T5831] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 567.373488][ T5831] usb 4-1: config 0 has no interfaces? [ 567.386053][ T5831] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 567.420321][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.437473][ T5831] usb 4-1: Product: syz [ 567.444006][ T5831] usb 4-1: Manufacturer: syz [ 567.448918][ T5831] usb 4-1: SerialNumber: syz [ 567.458671][ T5831] usb 4-1: config 0 descriptor?? [ 567.581743][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 568.481570][T12944] fuse: Bad value for 'fd' [ 568.488080][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 568.621456][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 569.185585][T12953] xt_recent: hitcount (262143) is larger than allowed maximum (65535) [ 569.661599][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 569.811457][ T5831] usb 4-1: USB disconnect, device number 73 [ 569.921556][ T43] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 570.083671][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 570.092980][ T43] usb 5-1: config 1 has an invalid interface number: 43 but max is 1 [ 570.121640][ T43] usb 5-1: config 1 has no interface number 1 [ 570.158283][ T43] usb 5-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 570.195252][ T43] usb 5-1: config 1 interface 0 has no altsetting 0 [ 570.234278][ T43] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 570.251418][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.269688][ T43] usb 5-1: Product: syz [ 570.271585][ T5831] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 570.300278][ T43] usb 5-1: Manufacturer: syz [ 570.305058][ T43] usb 5-1: SerialNumber: syz [ 570.481581][ T5831] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 570.511234][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.547595][ T5831] usb 1-1: config 0 descriptor?? [ 570.701462][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 570.780000][ T5831] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 570.916870][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 570.916888][ T30] audit: type=1326 audit(1751472934.687:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.3.2181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb43018e929 code=0x0 [ 570.996896][ T5831] [drm:udl_init] *ERROR* Selecting channel failed [ 571.184451][ T5831] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 571.222378][ T5831] [drm] Initialized udl on minor 2 [ 571.250120][ T5831] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 571.284552][ T5831] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 571.314185][ T5917] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 571.329334][ T5831] usb 1-1: USB disconnect, device number 86 [ 571.340550][ T5917] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 571.741549][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 571.771607][ T5899] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 571.911608][ T5899] usb 4-1: device descriptor read/64, error -71 [ 572.356669][ T5899] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 572.511678][ T5899] usb 4-1: device descriptor read/64, error -71 [ 572.629219][ T43] gspca_main: spca501-2.14.0 probing 0000:0000 [ 572.641541][ T5899] usb usb4-port1: attempt power cycle [ 572.657054][ T43] gspca_spca501: reg write: error -71 [ 572.690674][ T43] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 572.711628][ T43] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 572.781509][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 572.793191][ T43] usb 5-1: USB disconnect, device number 84 [ 573.071169][ T5899] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 573.220015][ T5899] usb 4-1: device descriptor read/8, error -71 [ 573.355252][ T43] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 573.522093][ T5899] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 573.548061][ T5899] usb 4-1: device descriptor read/8, error -71 [ 573.587441][ T43] usb 5-1: device descriptor read/64, error -71 [ 573.729917][ T5899] usb usb4-port1: unable to enumerate USB device [ 573.821533][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 573.852435][ T43] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 573.926598][T13005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.001506][ T43] usb 5-1: device descriptor read/64, error -71 [ 574.151194][ T43] usb usb5-port1: attempt power cycle [ 574.351742][ T5917] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 574.529483][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 574.546422][ T43] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 574.551962][ T5917] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 574.571431][ T5917] usb 4-1: config 127 has no interface number 1 [ 574.594397][ T43] usb 5-1: device descriptor read/8, error -71 [ 574.611468][ T5917] usb 4-1: config 127 interface 171 has no altsetting 0 [ 574.655500][ T5917] usb 4-1: config 127 interface 0 has no altsetting 0 [ 574.668309][ T5917] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 574.682815][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.691074][ T5917] usb 4-1: Product: syz [ 574.700135][ T5917] usb 4-1: Manufacturer: syz [ 574.743573][ T5917] usb 4-1: SerialNumber: syz [ 574.861492][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 574.889307][ T43] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 574.897295][ T5899] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 574.962266][ T43] usb 5-1: device descriptor read/8, error -71 [ 575.014183][ T5917] xr_serial 4-1:127.171: xr_serial converter detected [ 575.030992][ T5917] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 575.038521][ T5917] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 575.074623][ T43] usb usb5-port1: unable to enumerate USB device [ 575.081496][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 575.089560][ T5899] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 575.090565][ T5917] usb 4-1: USB disconnect, device number 78 [ 575.107113][ T5899] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 575.118636][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.159436][ T5899] usb 2-1: Product: syz [ 575.170998][ T5917] xr_serial 4-1:127.171: device disconnected [ 575.189815][ T5899] usb 2-1: Manufacturer: syz [ 575.209028][ T5899] usb 2-1: SerialNumber: syz [ 575.290763][ T5899] usb 2-1: config 0 descriptor?? [ 575.300796][T13024] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 575.336482][ T5899] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 575.901583][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 576.711585][ T43] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 576.901618][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 576.941449][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 576.970496][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.034420][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.109550][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.127358][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.155395][ T43] usb 1-1: Product: syz [ 577.165413][ T43] usb 1-1: Manufacturer: syz [ 577.177375][ T43] usb 1-1: SerialNumber: syz [ 577.429289][T13040] libceph: resolve '4' (ret=-3): failed [ 577.583057][ T5899] usb 2-1: USB disconnect, device number 64 [ 577.654994][T13060] fuse: Bad value for 'fd' [ 577.662284][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2201'. [ 577.847692][ T6536] udevd[6536]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.981609][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 578.085905][T13043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.095190][T13043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.598739][T13064] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 578.741732][ T5831] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 578.911703][ T5831] usb 2-1: device descriptor read/64, error -71 [ 579.021468][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 579.311720][ T5831] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 579.471686][ T5831] usb 2-1: device descriptor read/64, error -71 [ 579.641977][ T43] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 579.762488][ T5831] usb usb2-port1: attempt power cycle [ 579.806323][ T43] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 579.831999][ T43] usb 1-1: USB disconnect, device number 87 [ 579.905018][ T6537] udevd[6537]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.071480][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 580.101171][T13084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2210'. [ 580.152105][ T5831] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 580.202195][T13088] FAULT_INJECTION: forcing a failure. [ 580.202195][T13088] name failslab, interval 1, probability 0, space 0, times 0 [ 580.231774][ T5831] usb 2-1: device descriptor read/8, error -71 [ 580.241314][T13088] CPU: 1 UID: 0 PID: 13088 Comm: syz.0.2212 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 580.241344][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.241354][T13088] Call Trace: [ 580.241361][T13088] [ 580.241370][T13088] dump_stack_lvl+0x189/0x250 [ 580.241397][T13088] ? __pfx____ratelimit+0x10/0x10 [ 580.241420][T13088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.241442][T13088] ? __pfx__printk+0x10/0x10 [ 580.241470][T13088] should_fail_ex+0x414/0x560 [ 580.241483][ T5917] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 580.241495][T13088] should_failslab+0xa8/0x100 [ 580.241516][T13088] __kmalloc_cache_noprof+0x70/0x3d0 [ 580.241531][T13088] ? sctp_add_bind_addr+0x8c/0x370 [ 580.241557][T13088] sctp_add_bind_addr+0x8c/0x370 [ 580.241585][T13088] sctp_copy_local_addr_list+0x30b/0x4e0 [ 580.241614][T13088] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 580.241637][T13088] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 580.241661][T13088] ? sctp_v6_is_any+0x64/0x80 [ 580.241680][T13088] ? sctp_copy_one_addr+0x93/0x360 [ 580.241707][T13088] sctp_bind_addr_copy+0xb3/0x3c0 [ 580.241731][T13088] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 580.241755][T13088] sctp_connect_new_asoc+0x2e0/0x690 [ 580.241778][T13088] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 580.241795][T13088] ? __local_bh_enable_ip+0x12d/0x1c0 [ 580.241825][T13088] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 580.241844][T13088] ? security_sctp_bind_connect+0x7e/0x2e0 [ 580.241864][T13088] sctp_sendmsg+0x155c/0x2810 [ 580.241895][T13088] ? __pfx_sctp_sendmsg+0x10/0x10 [ 580.241917][T13088] ? aa_sk_perm+0x81e/0x950 [ 580.241940][T13088] ? __pfx_aa_sk_perm+0x10/0x10 [ 580.241961][T13088] ? sock_rps_record_flow+0x19/0x410 [ 580.241986][T13088] ? inet_sendmsg+0x2f4/0x370 [ 580.242012][T13088] __sock_sendmsg+0x19c/0x270 [ 580.242037][T13088] __sys_sendto+0x3bd/0x520 [ 580.242057][T13088] ? __pfx___sys_sendto+0x10/0x10 [ 580.242071][T13088] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 580.242128][T13088] ? __fget_files+0x3a0/0x420 [ 580.242157][T13088] ? ksys_write+0x22a/0x250 [ 580.242174][T13088] ? __pfx_ksys_write+0x10/0x10 [ 580.242187][T13088] ? rcu_is_watching+0x15/0xb0 [ 580.242215][T13088] __x64_sys_sendto+0xde/0x100 [ 580.242236][T13088] do_syscall_64+0xfa/0x3b0 [ 580.242257][T13088] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.242277][T13088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.242293][T13088] ? clear_bhb_loop+0x60/0xb0 [ 580.242313][T13088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.242329][T13088] RIP: 0033:0x7f1334b8e929 [ 580.242345][T13088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.242359][T13088] RSP: 002b:00007f13359c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 580.242376][T13088] RAX: ffffffffffffffda RBX: 00007f1334db5fa0 RCX: 00007f1334b8e929 [ 580.242388][T13088] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 580.242399][T13088] RBP: 00007f13359c1090 R08: 0000200000000140 R09: 000000000000001c [ 580.242410][T13088] R10: 00000000240080c5 R11: 0000000000000246 R12: 0000000000000002 [ 580.242420][T13088] R13: 0000000000000000 R14: 00007f1334db5fa0 R15: 00007f1334edfa28 [ 580.242448][T13088] [ 580.908439][T13092] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2213'. [ 581.042911][ T5831] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 581.072522][ T5831] usb 2-1: device descriptor read/8, error -71 [ 581.101466][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 581.182240][ T5831] usb usb2-port1: unable to enumerate USB device [ 581.434916][ T5917] usb 3-1: config 0 has no interfaces? [ 581.449923][ T5917] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 581.461787][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.470378][ T5917] usb 3-1: Product: syz [ 581.475193][ T5917] usb 3-1: Manufacturer: syz [ 581.481014][ T5917] usb 3-1: SerialNumber: syz [ 581.507141][ T5917] usb 3-1: config 0 descriptor?? [ 581.521766][ T5899] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 581.666141][ T5899] usb 1-1: device descriptor read/64, error -71 [ 581.920965][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.931584][ T5899] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 581.945201][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.961645][ T5831] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 582.081675][ T5899] usb 1-1: device descriptor read/64, error -71 [ 582.141527][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 582.188297][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.199003][ T5831] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 582.211325][ T5899] usb usb1-port1: attempt power cycle [ 582.256630][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.358770][ T5831] usb 2-1: config 0 descriptor?? [ 582.379964][ T5831] pwc: Askey VC010 type 2 USB webcam detected. [ 582.621956][ T5899] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 582.662229][ T5899] usb 1-1: device descriptor read/8, error -71 [ 582.774366][ T5831] pwc: recv_control_msg error -32 req 02 val 2b00 [ 582.791197][ T5831] pwc: recv_control_msg error -32 req 02 val 2700 [ 582.933863][ T5899] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 582.992893][ T5899] usb 1-1: device descriptor read/8, error -71 [ 583.115024][ T5899] usb usb1-port1: unable to enumerate USB device [ 583.181456][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 583.299570][T13130] FAULT_INJECTION: forcing a failure. [ 583.299570][T13130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.327490][T13130] CPU: 0 UID: 0 PID: 13130 Comm: syz.3.2226 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 583.327529][T13130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 583.327540][T13130] Call Trace: [ 583.327548][T13130] [ 583.327560][T13130] dump_stack_lvl+0x189/0x250 [ 583.327589][T13130] ? __pfx____ratelimit+0x10/0x10 [ 583.327612][T13130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.327635][T13130] ? __pfx__printk+0x10/0x10 [ 583.327654][T13130] ? __might_fault+0xb0/0x130 [ 583.327681][T13130] should_fail_ex+0x414/0x560 [ 583.327706][T13130] _copy_from_user+0x2d/0xb0 [ 583.327723][T13130] ___sys_sendmsg+0x158/0x2a0 [ 583.327746][T13130] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.327803][T13130] ? __fget_files+0x2a/0x420 [ 583.327821][T13130] ? __fget_files+0x3a0/0x420 [ 583.327848][T13130] __x64_sys_sendmsg+0x19b/0x260 [ 583.327871][T13130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.327899][T13130] ? __pfx_ksys_write+0x10/0x10 [ 583.327913][T13130] ? rcu_is_watching+0x15/0xb0 [ 583.327941][T13130] ? do_syscall_64+0xbe/0x3b0 [ 583.327968][T13130] do_syscall_64+0xfa/0x3b0 [ 583.327990][T13130] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.328011][T13130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.328027][T13130] ? clear_bhb_loop+0x60/0xb0 [ 583.328046][T13130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.328060][T13130] RIP: 0033:0x7fb43018e929 [ 583.328074][T13130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.328090][T13130] RSP: 002b:00007fb430f25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.328109][T13130] RAX: ffffffffffffffda RBX: 00007fb4303b5fa0 RCX: 00007fb43018e929 [ 583.328123][T13130] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 0000000000000003 [ 583.328135][T13130] RBP: 00007fb430f25090 R08: 0000000000000000 R09: 0000000000000000 [ 583.328146][T13130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.328157][T13130] R13: 0000000000000000 R14: 00007fb4303b5fa0 R15: 00007fb4304dfa28 [ 583.328185][T13130] [ 583.567435][ T5917] usb 3-1: USB disconnect, device number 75 [ 583.702796][T13132] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[13132] [ 583.894475][T13135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2229'. [ 584.020370][T13139] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 584.061565][ T5899] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 584.223062][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 584.557088][ T5899] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.631192][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2231'. [ 584.737304][ T5899] usb 3-1: config 1 interface 0 has no altsetting 0 [ 584.761669][ T5899] usb 3-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.40 [ 584.777470][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.800809][ T5899] usb 3-1: Product: à ¬ [ 584.864280][ T5899] usb 3-1: Manufacturer: ᭜牂霈㣕陌풭눮韀᪽짵㼄ݸ辣넎戻ꋶ㠋ëîšä‚†åš¦é¶¦èž¢ï³™ãœ½ë磮횜艖푉᧰ê£îŠªãŠ‰ä¥µâ²¶á²â”æŒè«•紉⊠緘ጶ⇇샆᪱펋îžè­‘쨫㥄E䮸皹羭áœîªºï¤»í›Ÿ [ 585.090633][ T5899] usb 3-1: SerialNumber: à°‡ [ 585.174856][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'. [ 585.184222][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'. [ 585.230624][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'. [ 585.231974][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2236'. [ 585.261448][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 585.279206][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2236'. [ 585.288790][T13161] netlink: 'syz.0.2236': attribute type 6 has an invalid length. [ 585.305652][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2236'. [ 585.353950][ T5899] usbhid 3-1:1.0: can't add hid device: -71 [ 585.360363][ T5899] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 585.409829][ T5831] pwc: recv_control_msg error -71 req 02 val 2c00 [ 585.412445][ T5899] usb 3-1: USB disconnect, device number 76 [ 585.431512][T13157] netlink: 'syz.0.2236': attribute type 6 has an invalid length. [ 585.434948][T13156] netlink: 'syz.0.2236': attribute type 6 has an invalid length. [ 585.488478][ T5831] pwc: recv_control_msg error -71 req 04 val 1000 [ 585.528906][ T5831] pwc: recv_control_msg error -71 req 04 val 1300 [ 585.578981][ T5831] pwc: recv_control_msg error -71 req 04 val 1400 [ 585.631243][ T5831] pwc: recv_control_msg error -71 req 02 val 2000 [ 585.701887][ T5831] pwc: recv_control_msg error -71 req 02 val 2100 [ 585.742581][ T5831] pwc: recv_control_msg error -71 req 04 val 1500 [ 585.765391][ T5831] pwc: recv_control_msg error -71 req 02 val 2500 [ 585.820524][ T5831] pwc: recv_control_msg error -71 req 02 val 2400 [ 585.840934][ T5831] pwc: recv_control_msg error -71 req 02 val 2600 [ 585.855187][T13172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2241'. [ 585.893172][ T5831] pwc: recv_control_msg error -71 req 02 val 2900 [ 585.993085][ T5831] pwc: recv_control_msg error -71 req 02 val 2800 [ 586.065945][ T5831] pwc: recv_control_msg error -71 req 04 val 1100 [ 586.096069][ T5831] pwc: recv_control_msg error -71 req 04 val 1200 [ 586.219578][ T5831] pwc: Registered as video103. [ 586.269665][ T5831] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 586.301446][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 586.337110][ T5831] usb 2-1: USB disconnect, device number 69 [ 586.451463][ T43] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 586.502867][ T5917] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 586.701745][ T43] usb 1-1: device descriptor read/64, error -71 [ 586.765386][ T5917] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 586.779596][T13181] cgroup: fork rejected by pids controller in /syz2 [ 586.821474][ T5831] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 586.867833][ T5917] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 586.941309][ T5917] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 586.969911][ T5917] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 586.971722][ T43] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 586.990837][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.022076][T13227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2253'. [ 587.040941][T13225] syzkaller1: entered promiscuous mode [ 587.057686][T13225] syzkaller1: entered allmulticast mode [ 587.161641][ T43] usb 1-1: device descriptor read/64, error -71 [ 587.181773][ T30] audit: type=1326 audit(1751472950.947:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00398e929 code=0x7ffc0000 [ 587.299415][ T30] audit: type=1326 audit(1751472950.947:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe00398e929 code=0x7ffc0000 [ 587.341557][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 587.392105][ T43] usb usb1-port1: attempt power cycle [ 587.421445][ T5899] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 587.447251][ T30] audit: type=1326 audit(1751472950.947:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00398e929 code=0x7ffc0000 [ 587.474509][ T30] audit: type=1326 audit(1751472950.947:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe00398e929 code=0x7ffc0000 [ 587.503614][ T30] audit: type=1326 audit(1751472950.947:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00398e929 code=0x7ffc0000 [ 587.532308][ T30] audit: type=1326 audit(1751472950.947:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fe00398e929 code=0x7ffc0000 [ 587.561481][ T5831] usb 2-1: config 0 has no interfaces? [ 587.569256][ T30] audit: type=1326 audit(1751472950.947:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00398e929 code=0x7ffc0000 [ 587.619260][ T30] audit: type=1326 audit(1751472950.947:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe00398e929 code=0x7ffc0000 [ 587.642893][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 587.657322][ T30] audit: type=1326 audit(1751472950.947:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00398e929 code=0x7ffc0000 [ 587.712590][ T30] audit: type=1326 audit(1751472950.947:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe00398e929 code=0x7ffc0000 [ 587.771512][ T5831] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 587.780655][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.812005][ T43] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 587.845156][ T43] usb 1-1: device descriptor read/8, error -71 [ 587.882038][ T5831] usb 2-1: Product: syz [ 587.886426][ T5917] usb 3-1: string descriptor 0 read error: -71 [ 587.941651][ T5831] usb 2-1: Manufacturer: syz [ 587.946335][ T5831] usb 2-1: SerialNumber: syz [ 588.071927][ T5831] usb 2-1: config 0 descriptor?? [ 588.111491][ T43] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 588.132174][ T43] usb 1-1: device descriptor read/8, error -71 [ 588.145516][ T5917] usb 3-1: USB disconnect, device number 77 [ 588.252073][ T43] usb usb1-port1: unable to enumerate USB device [ 588.381431][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 588.641708][ T5831] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 588.801687][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 588.826613][ T5831] usb 4-1: unable to get BOS descriptor or descriptor too short [ 588.853242][ T5831] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 588.861134][ T5831] usb 4-1: can't read configurations, error -71 [ 589.421446][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 589.441678][ T5891] usb 2-1: USB disconnect, device number 70 [ 589.840300][T13259] CIFS: VFS: Malformed UNC in devname [ 589.907631][T13261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2265'. [ 589.935908][T13262] program syz.1.2265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.170438][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 590.201788][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 590.225373][ T5899] usb 5-1: can't read configurations, error -71 [ 590.245406][T13272] fuse: Bad value for 'fd' [ 590.252636][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2266'. [ 590.461560][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 590.511522][ T43] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 590.719677][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 590.739534][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.766144][ T43] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 590.790019][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.950438][ T43] usb 4-1: Product: syz [ 590.955948][ T43] usb 4-1: Manufacturer: syz [ 590.960602][ T43] usb 4-1: SerialNumber: syz [ 590.988562][ T43] usb 4-1: config 0 descriptor?? [ 591.059001][ T43] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 591.191790][ T5899] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 591.259023][T13271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.282122][T13271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.313775][ T43] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 591.325531][ T43] usb 4-1: USB disconnect, device number 81 [ 591.351896][ T5899] usb 5-1: device descriptor read/64, error -71 [ 591.485230][ T5899] usb usb5-port1: attempt power cycle [ 591.501464][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 591.641538][ T5891] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 591.814161][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 591.831422][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.847088][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 591.857013][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.861887][ T5899] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 592.097840][ T5899] usb 5-1: device descriptor read/8, error -71 [ 592.154553][ T5891] usb 1-1: config 0 descriptor?? [ 592.391512][ T5899] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 592.436206][ T5899] usb 5-1: device descriptor read/8, error -71 [ 592.541482][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 592.551989][ T5899] usb usb5-port1: unable to enumerate USB device [ 592.572355][ T5891] logitech 0003:046D:C24F.000C: ignoring exceeding usage max [ 592.588716][ T5891] logitech 0003:046D:C24F.000C: hidraw0: USB HID v10.00 Device [HID 046d:c24f] on usb-dummy_hcd.0-1/input0 [ 592.601064][ T5891] logitech 0003:046D:C24F.000C: no inputs found [ 592.820461][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2273'. [ 593.581495][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 593.611897][ T5906] usb 1-1: USB disconnect, device number 96 [ 593.624552][T13320] FAULT_INJECTION: forcing a failure. [ 593.624552][T13320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.741107][T13320] CPU: 1 UID: 0 PID: 13320 Comm: syz.1.2281 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 593.741135][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 593.741152][T13320] Call Trace: [ 593.741160][T13320] [ 593.741169][T13320] dump_stack_lvl+0x189/0x250 [ 593.741197][T13320] ? __pfx____ratelimit+0x10/0x10 [ 593.741221][T13320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.741245][T13320] ? __pfx__printk+0x10/0x10 [ 593.741276][T13320] should_fail_ex+0x414/0x560 [ 593.741303][T13320] _copy_to_user+0x31/0xb0 [ 593.741322][T13320] simple_read_from_buffer+0xe1/0x170 [ 593.741347][T13320] proc_fail_nth_read+0x1df/0x250 [ 593.741368][T13320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 593.741390][T13320] ? rw_verify_area+0x258/0x650 [ 593.741413][T13320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 593.741434][T13320] vfs_read+0x200/0x980 [ 593.741463][T13320] ? __pfx___mutex_lock+0x10/0x10 [ 593.741488][T13320] ? __pfx_vfs_read+0x10/0x10 [ 593.741513][T13320] ? __fget_files+0x2a/0x420 [ 593.741536][T13320] ? __fget_files+0x3a0/0x420 [ 593.741552][T13320] ? __fget_files+0x2a/0x420 [ 593.741580][T13320] ksys_read+0x145/0x250 [ 593.741606][T13320] ? __pfx_ksys_read+0x10/0x10 [ 593.741627][T13320] ? fput+0xa0/0xd0 [ 593.741652][T13320] ? do_syscall_64+0xbe/0x3b0 [ 593.741679][T13320] do_syscall_64+0xfa/0x3b0 [ 593.741700][T13320] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.741721][T13320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.741739][T13320] ? clear_bhb_loop+0x60/0xb0 [ 593.741760][T13320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.741776][T13320] RIP: 0033:0x7f859b98d33c [ 593.741792][T13320] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 593.741807][T13320] RSP: 002b:00007f859c7e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 593.741824][T13320] RAX: ffffffffffffffda RBX: 00007f859bbb6160 RCX: 00007f859b98d33c [ 593.741837][T13320] RDX: 000000000000000f RSI: 00007f859c7e10a0 RDI: 0000000000000005 [ 593.741848][T13320] RBP: 00007f859c7e1090 R08: 0000000000000000 R09: 0000000000000000 [ 593.741859][T13320] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.741870][T13320] R13: 0000000000000000 R14: 00007f859bbb6160 R15: 00007f859bcdfa28 [ 593.741899][T13320] [ 593.977666][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.129250][T13331] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2284'. [ 594.621528][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 595.091525][ T5899] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 595.376646][ T5899] usb 3-1: config 0 has no interfaces? [ 595.437337][ T5899] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 595.488134][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.532427][ T5899] usb 3-1: Product: syz [ 595.552611][ T5899] usb 3-1: Manufacturer: syz [ 595.576985][ T5899] usb 3-1: SerialNumber: syz [ 595.631860][ T5899] usb 3-1: config 0 descriptor?? [ 595.661461][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 595.948422][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'. [ 596.005896][T13342] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2288'. [ 596.531688][ T5891] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 596.581503][ T5899] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 596.662271][ T5891] usb 1-1: device descriptor read/64, error -71 [ 596.701431][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 596.766119][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 596.796303][ T5899] usb 5-1: can't read configurations, error -61 [ 596.805584][T13365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2295'. [ 596.905091][ T5891] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 596.957990][ T5899] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 597.071816][ T5891] usb 1-1: device descriptor read/64, error -71 [ 597.185118][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 597.192019][ T5891] usb usb1-port1: attempt power cycle [ 597.193750][ T5899] usb 5-1: can't read configurations, error -61 [ 597.220355][ T5899] usb usb5-port1: attempt power cycle [ 597.631487][ T5899] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 597.631634][ T5891] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 597.713389][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 597.728464][ T5899] usb 5-1: can't read configurations, error -61 [ 597.741454][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 597.777991][ T43] usb 3-1: USB disconnect, device number 78 [ 597.803209][ T5891] usb 1-1: device descriptor read/8, error -71 [ 597.861601][ T5906] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 597.891549][ T5899] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 597.956263][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 597.965089][ T5899] usb 5-1: can't read configurations, error -61 [ 597.973652][ T5899] usb usb5-port1: unable to enumerate USB device [ 598.003754][ T5906] usb 4-1: device descriptor read/64, error -71 [ 598.038678][T13380] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[13380] [ 598.058593][ T5891] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 598.091722][ T5891] usb 1-1: device descriptor read/8, error -71 [ 598.251660][ T5891] usb usb1-port1: unable to enumerate USB device [ 598.329231][ T5906] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 598.472242][ T5906] usb 4-1: device descriptor read/64, error -71 [ 598.582720][ T5906] usb usb4-port1: attempt power cycle [ 598.781443][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 598.943480][ T5906] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 598.978744][ T5906] usb 4-1: device descriptor read/8, error -71 [ 599.247166][ T5906] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 599.282628][ T5906] usb 4-1: device descriptor read/8, error -71 [ 599.422019][ T5899] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 599.474954][ T5906] usb usb4-port1: unable to enumerate USB device [ 599.758539][ T5899] usb 2-1: config 0 has no interfaces? [ 599.800353][ T5899] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 599.820283][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.821480][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 599.829306][ T5899] usb 2-1: Product: syz [ 599.890838][ T5899] usb 2-1: Manufacturer: syz [ 599.901062][ T5899] usb 2-1: SerialNumber: syz [ 599.916772][ T5899] usb 2-1: config 0 descriptor?? [ 600.193554][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2311'. [ 600.861555][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 601.901445][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 602.241638][ T5899] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 602.344352][T13434] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2314'. [ 602.396243][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 602.408138][ T5899] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 602.422021][ T5899] usb 4-1: config 0 has no interface number 0 [ 602.428409][ T5899] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 602.463414][ T5899] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 602.466934][ T5891] usb 2-1: USB disconnect, device number 71 [ 602.503457][T13439] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2317'. [ 602.554128][ T5899] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 602.563654][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 602.572235][ T5899] usb 4-1: Product: syz [ 602.578881][ T5899] usb 4-1: SerialNumber: syz [ 602.588279][ T5899] usb 4-1: config 0 descriptor?? [ 602.616168][ T5899] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 602.913110][ T5899] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input20 [ 602.951434][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 603.003290][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.012828][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.020124][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.027389][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.034521][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.041900][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.049690][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.057244][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.057458][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.072048][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 603.102816][ T5899] usb 4-1: USB disconnect, device number 86 [ 603.108788][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 603.172770][ T5899] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 603.722040][ T5891] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 603.782040][ T5831] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 603.894857][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2321'. [ 603.981449][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 603.999371][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 604.004591][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 604.032349][T13460] loop6: detected capacity change from 0 to 7 [ 604.044571][T13459] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 604.052520][T13459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.068651][ T6537] Dev loop6: unable to read RDB block 7 [ 604.145201][ T6537] loop6: AHDI p1 p2 p4 [ 604.149436][ T6537] loop6: partition table partially beyond EOD, truncated [ 604.204117][ T6537] loop6: p1 start 926365495 is beyond EOD, truncated [ 604.210996][ T6537] loop6: p2 size 13 extends beyond EOD, truncated [ 604.266701][T13460] Dev loop6: unable to read RDB block 7 [ 604.316254][ T5831] usb 2-1: unable to get BOS descriptor or descriptor too short [ 604.338005][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 604.370382][T13460] loop6: AHDI p1 p2 p4 [ 604.378685][ T5831] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 604.387314][ T5831] usb 2-1: config 7 has no interface number 0 [ 604.393850][ T5831] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 604.414818][ T5831] usb 2-1: config 7 interface 187 has no altsetting 0 [ 604.431661][T13460] loop6: partition table partially beyond EOD, truncated [ 604.460804][ T5831] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 604.470292][T13460] loop6: p1 start 926365495 is beyond EOD, truncated [ 604.517023][T13460] loop6: p2 size 13 extends beyond EOD, truncated [ 604.548315][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.600283][ T5831] usb 2-1: Product: syz [ 604.612971][ T5891] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 604.631870][ T5831] usb 2-1: Manufacturer: syz [ 604.695839][ T5891] usb 1-1: config 7 has no interface number 0 [ 604.711771][ T5831] usb 2-1: SerialNumber: syz [ 604.726857][ T5891] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 604.779828][T13453] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 604.808477][ T5891] usb 1-1: config 7 interface 187 has no altsetting 0 [ 604.906766][ T5891] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 604.937283][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.004256][ T6537] udevd[6537]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 605.021599][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 605.035614][ T5891] usb 1-1: Product: syz [ 605.093796][ T6537] udevd[6537]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 605.111786][ T5891] usb 1-1: Manufacturer: syz [ 605.123022][ T5891] usb 1-1: SerialNumber: syz [ 605.322806][T13451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 605.507357][ T5831] usb 2-1: Limiting number of CPorts to U8_MAX [ 605.524687][ T5831] usb 2-1: Unknown endpoint type found, address 0x07 [ 605.533014][ T5831] usb 2-1: Not enough endpoints found in device, aborting! [ 605.593294][ T5891] usb 1-1: Limiting number of CPorts to U8_MAX [ 605.600077][ T5891] usb 1-1: Unknown endpoint type found, address 0x07 [ 605.688419][ T5891] usb 1-1: Not enough endpoints found in device, aborting! [ 605.741445][ T5899] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 605.845960][T13453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.855523][T13453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.929181][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.964960][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 605.976645][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 605.990532][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 606.069784][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 606.172810][T13451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.843191][ T5899] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 606.896187][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.975972][ T5899] usb 5-1: config 0 descriptor?? [ 607.065902][T13451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.101438][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 607.172469][ T5906] usb 2-1: USB disconnect, device number 72 [ 607.519650][T13483] fuse: root generation should be zero [ 607.762345][ T5899] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 607.832730][T13490] openvswitch: netlink: Message has 24 unknown bytes. [ 607.839912][T13490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.120913][ T5899] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 608.141600][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 608.157407][ T5891] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 608.261694][ T43] usb 1-1: USB disconnect, device number 101 [ 608.310012][ T5831] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 608.322605][ T5899] usb 5-1: USB disconnect, device number 97 [ 608.357289][ T5891] usb 4-1: config 0 has no interfaces? [ 608.398790][ T5891] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 608.410596][T13497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2330'. [ 608.440376][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.496377][ T5891] usb 4-1: Product: syz [ 608.506221][T13494] fido_id[13494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 608.525086][ T5891] usb 4-1: Manufacturer: syz [ 608.536356][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 608.541742][ T5891] usb 4-1: SerialNumber: syz [ 608.563216][ T5831] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 608.577112][ T5891] usb 4-1: config 0 descriptor?? [ 608.601776][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.659834][ T5831] usb 3-1: Product: syz [ 608.699931][ T5831] usb 3-1: Manufacturer: syz [ 608.720453][ T5831] usb 3-1: SerialNumber: syz [ 608.744789][ T5831] usb 3-1: config 0 descriptor?? [ 608.964860][ T5831] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 609.183066][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 609.272885][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 609.272903][ T30] audit: type=1326 audit(1751472973.047:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13500 comm="syz.4.2332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe00398e929 code=0x0 [ 609.412208][T13506] vlan2: entered promiscuous mode [ 609.425223][T13506] bond0: entered promiscuous mode [ 609.570093][ T5831] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 610.221551][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 611.003360][ T43] usb 4-1: USB disconnect, device number 87 [ 611.116394][ T30] audit: type=1326 audit(1751472974.887:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.3.2336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb43018e929 code=0x0 [ 611.173916][ T5899] IPVS: starting estimator thread 0... [ 611.180515][T13523] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 611.261445][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 611.281570][T13525] IPVS: using max 26 ests per chain, 62400 per kthread [ 611.428294][T13529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2339'. [ 611.501585][ T43] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 611.661684][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 611.682644][ T5899] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 611.691746][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.706436][ T977] usb 3-1: USB disconnect, device number 79 [ 611.718876][ T43] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 611.738700][ T43] usb 1-1: New USB device found, idVendor=7d2f, idProduct=9065, bcdDevice= 7.92 [ 611.749992][ T43] usb 1-1: New USB device strings: Mfr=145, Product=79, SerialNumber=3 [ 611.765613][ T43] usb 1-1: Product: syz [ 611.773891][ T43] usb 1-1: Manufacturer: syz [ 611.778669][ T43] usb 1-1: SerialNumber: syz [ 611.796130][ T43] usb 1-1: config 0 descriptor?? [ 611.871669][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 611.878992][ T5899] usb 2-1: config 2 has an invalid interface number: 32 but max is 3 [ 611.887212][ T5899] usb 2-1: config 2 has an invalid interface number: 55 but max is 3 [ 611.895434][ T5899] usb 2-1: config 2 has an invalid interface number: 196 but max is 3 [ 611.903819][ T5899] usb 2-1: config 2 has no interface number 1 [ 611.910023][ T5899] usb 2-1: config 2 has no interface number 2 [ 611.916494][ T5899] usb 2-1: config 2 has no interface number 3 [ 611.923190][ T5899] usb 2-1: config 2 interface 32 has no altsetting 0 [ 611.930626][ T5899] usb 2-1: config 2 interface 0 has no altsetting 0 [ 611.937645][ T5899] usb 2-1: config 2 interface 55 has no altsetting 0 [ 611.944534][ T5899] usb 2-1: config 2 interface 196 has no altsetting 0 [ 611.955235][ T5899] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=65.11 [ 611.964795][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.973133][ T5899] usb 2-1: Product: syz [ 611.981417][ T5899] usb 2-1: Manufacturer: syz [ 611.986093][ T5899] usb 2-1: SerialNumber: syz [ 612.117551][ T5831] usb 1-1: USB disconnect, device number 102 [ 612.131555][ T977] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 612.207483][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2339'. [ 612.301546][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 612.316108][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 612.341977][ T977] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 612.350288][ T977] usb 3-1: config 0 has no interface number 0 [ 612.356606][ T43] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 612.377084][ T977] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 612.399665][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.408220][ T977] usb 3-1: Product: syz [ 612.418193][ T977] usb 3-1: Manufacturer: syz [ 612.426659][ T977] usb 3-1: SerialNumber: syz [ 612.442424][ T977] usb 3-1: config 0 descriptor?? [ 612.482548][ T5899] usb 2-1: USB disconnect, device number 73 [ 612.529815][ T977] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 612.576369][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 612.594240][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.605548][ T43] usb 4-1: Product: syz [ 612.613784][ T43] usb 4-1: Manufacturer: syz [ 612.634932][ T43] usb 4-1: SerialNumber: syz [ 612.671023][ T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 612.741304][ T5906] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 612.773963][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 612.795103][ T6536] udevd[6536]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.948876][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.55/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 612.968519][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.196/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 613.148756][T13545] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2344'. [ 613.189743][T13545] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2344'. [ 613.258861][ T5831] usb 4-1: USB disconnect, device number 88 [ 613.341519][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 613.481910][ T5891] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 613.641491][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 613.745410][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 613.755906][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 613.786129][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 613.915544][T13563] netlink: 'syz.1.2348': attribute type 322 has an invalid length. [ 613.933617][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 613.995310][ T5906] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 614.008014][ T5891] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 614.019555][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.022650][ T5906] ath9k_htc: Failed to initialize the device [ 614.046461][ T5831] usb 4-1: ath9k_htc: USB layer deinitialized [ 614.054754][ T5891] usb 1-1: Product: syz [ 614.070675][ T5891] usb 1-1: Manufacturer: syz [ 614.101697][ T5891] usb 1-1: SerialNumber: syz [ 614.122385][ T5891] usb 1-1: config 0 descriptor?? [ 614.143453][ T5891] usb 1-1: no audio or video endpoints found [ 614.161763][ T43] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 614.312556][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 614.323794][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 614.356308][ T43] usb 2-1: config 7 has an invalid interface number: 128 but max is 0 [ 614.367944][ T43] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 614.380700][ T43] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 614.381580][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 614.398336][ T5831] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 614.426268][ T43] usb 2-1: config 7 has no interface number 0 [ 614.437075][ T43] usb 2-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 614.460190][ T43] usb 2-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 614.484097][ T43] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 614.508763][ T43] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 614.541273][ T43] usb 2-1: config 7 interface 128 has no altsetting 0 [ 614.558662][ T43] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 614.567715][ T5831] usb 4-1: config 0 has no interfaces? [ 614.581715][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.590926][ T5831] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 614.607153][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.616903][ T5831] usb 4-1: Product: syz [ 614.627893][ T5831] usb 4-1: Manufacturer: syz [ 614.627897][ T43] usb 2-1: Product: syz [ 614.627915][ T5831] usb 4-1: SerialNumber: syz [ 614.654740][ T5831] usb 4-1: config 0 descriptor?? [ 614.668177][ T43] usb 2-1: Manufacturer: syz [ 614.674649][ T43] usb 2-1: SerialNumber: syz [ 614.756394][T13563] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 614.870166][ T5831] usb 1-1: USB disconnect, device number 103 [ 614.908829][ T977] gspca_spca1528: reg_r err -71 [ 614.932300][ T977] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 614.959635][ T977] usb 3-1: USB disconnect, device number 80 [ 615.150648][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.207835][ T43] usb 2-1: MIDIStreaming interface descriptor not found [ 615.369341][ T43] usb 2-1: USB disconnect, device number 74 [ 615.421492][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 615.738797][ T7826] udevd[7826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.129827][T13597] loop7: detected capacity change from 0 to 16384 [ 616.406489][ T43] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 616.432091][ T977] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 616.461452][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 616.565841][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 616.573637][ T43] usb 3-1: config 0 has no interfaces? [ 616.581666][ T977] usb 1-1: device descriptor read/64, error -71 [ 616.592646][ T43] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 616.620578][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.630865][ T43] usb 3-1: Product: syz [ 616.638550][ T43] usb 3-1: Manufacturer: syz [ 616.645339][ T43] usb 3-1: SerialNumber: syz [ 616.662807][ T43] usb 3-1: config 0 descriptor?? [ 616.841995][ T977] usb 1-1: new low-speed USB device number 105 using dummy_hcd [ 617.041683][ T977] usb 1-1: device descriptor read/64, error -71 [ 617.084626][T13597] I/O error, dev loop7, sector 3880 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 617.100990][T13597] I/O error, dev loop7, sector 4104 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 617.119849][T13597] I/O error, dev loop7, sector 4136 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 617.150982][T13597] I/O error, dev loop7, sector 3880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.160708][T13597] buffer_io_error: 126 callbacks suppressed [ 617.160722][T13597] Buffer I/O error on dev loop7, logical block 485, async page read [ 617.185454][T13597] I/O error, dev loop7, sector 3880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.201771][T13597] Buffer I/O error on dev loop7, logical block 485, async page read [ 617.218648][ T977] usb usb1-port1: attempt power cycle [ 617.236789][ T10] usb 4-1: USB disconnect, device number 89 [ 617.311689][T13597] I/O error, dev loop7, sector 3880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.328729][T13597] Buffer I/O error on dev loop7, logical block 485, async page read [ 617.359284][T13606] FAULT_INJECTION: forcing a failure. [ 617.359284][T13606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.400766][T13596] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 617.439190][ T5831] usb 3-1: USB disconnect, device number 81 [ 617.451608][T13606] CPU: 1 UID: 0 PID: 13606 Comm: syz.3.2361 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 617.451633][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 617.451642][T13606] Call Trace: [ 617.451649][T13606] [ 617.451657][T13606] dump_stack_lvl+0x189/0x250 [ 617.451687][T13606] ? __pfx____ratelimit+0x10/0x10 [ 617.451709][T13606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.451729][T13606] ? __pfx__printk+0x10/0x10 [ 617.451743][T13606] ? __might_fault+0xb0/0x130 [ 617.451765][T13606] should_fail_ex+0x414/0x560 [ 617.451788][T13606] _copy_from_iter+0x1db/0x16f0 [ 617.451813][T13606] ? rcu_is_watching+0x15/0xb0 [ 617.451838][T13606] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 617.451857][T13606] ? __pfx__copy_from_iter+0x10/0x10 [ 617.451880][T13606] ? __build_skb_around+0x257/0x3e0 [ 617.451901][T13606] ? netlink_sendmsg+0x642/0xb30 [ 617.451918][T13606] ? skb_put+0x11b/0x210 [ 617.451939][T13606] netlink_sendmsg+0x6b2/0xb30 [ 617.451965][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.451986][T13606] ? aa_sock_msg_perm+0x94/0x160 [ 617.452005][T13606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 617.452021][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.452038][T13606] __sock_sendmsg+0x219/0x270 [ 617.452062][T13606] ____sys_sendmsg+0x505/0x830 [ 617.452086][T13606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 617.452113][T13606] ? import_iovec+0x74/0xa0 [ 617.452132][T13606] ___sys_sendmsg+0x21f/0x2a0 [ 617.452154][T13606] ? __pfx____sys_sendmsg+0x10/0x10 [ 617.452257][T13606] ? __fget_files+0x2a/0x420 [ 617.452274][T13606] ? __fget_files+0x3a0/0x420 [ 617.452302][T13606] __x64_sys_sendmsg+0x19b/0x260 [ 617.452325][T13606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 617.452354][T13606] ? __pfx_ksys_write+0x10/0x10 [ 617.452368][T13606] ? rcu_is_watching+0x15/0xb0 [ 617.452396][T13606] ? do_syscall_64+0xbe/0x3b0 [ 617.452424][T13606] do_syscall_64+0xfa/0x3b0 [ 617.452444][T13606] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.452466][T13606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.452484][T13606] ? clear_bhb_loop+0x60/0xb0 [ 617.452504][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.452521][T13606] RIP: 0033:0x7fb43018e929 [ 617.452538][T13606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.452552][T13606] RSP: 002b:00007fb430f25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.452571][T13606] RAX: ffffffffffffffda RBX: 00007fb4303b5fa0 RCX: 00007fb43018e929 [ 617.452584][T13606] RDX: 0000000004041080 RSI: 0000200000000180 RDI: 0000000000000003 [ 617.452596][T13606] RBP: 00007fb430f25090 R08: 0000000000000000 R09: 0000000000000000 [ 617.452607][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.452617][T13606] R13: 0000000000000000 R14: 00007fb4303b5fa0 R15: 00007fb4304dfa28 [ 617.452646][T13606] [ 617.501559][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 617.777295][T13596] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 617.809935][T13596] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 617.851835][ T977] usb 1-1: new low-speed USB device number 106 using dummy_hcd [ 617.871684][T13596] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 617.909323][T13596] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 617.922290][ T977] usb 1-1: device descriptor read/8, error -71 [ 617.944137][T13596] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 617.954701][T13596] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 617.963818][T13596] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 617.983572][T13596] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 618.046430][T13596] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 618.085060][T13612] netem: incorrect gi model size [ 618.104283][T13612] netem: change failed [ 618.138194][T13596] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x800 phys_seg 101 prio class 0 [ 618.262626][ T5831] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 618.325837][T13620] FAULT_INJECTION: forcing a failure. [ 618.325837][T13620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.337100][T13621] FAULT_INJECTION: forcing a failure. [ 618.337100][T13621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.353687][T13620] CPU: 1 UID: 0 PID: 13620 Comm: syz.3.2367 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 618.353713][T13620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.353724][T13620] Call Trace: [ 618.353732][T13620] [ 618.353740][T13620] dump_stack_lvl+0x189/0x250 [ 618.353770][T13620] ? __pfx____ratelimit+0x10/0x10 [ 618.353793][T13620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.353818][T13620] ? __pfx__printk+0x10/0x10 [ 618.353836][T13620] ? __might_fault+0xb0/0x130 [ 618.353864][T13620] should_fail_ex+0x414/0x560 [ 618.353890][T13620] _copy_from_iter+0x1db/0x16f0 [ 618.353916][T13620] ? rcu_is_watching+0x15/0xb0 [ 618.353942][T13620] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 618.353960][T13620] ? __pfx__copy_from_iter+0x10/0x10 [ 618.353984][T13620] ? __build_skb_around+0x257/0x3e0 [ 618.354007][T13620] ? netlink_sendmsg+0x642/0xb30 [ 618.354023][T13620] ? skb_put+0x11b/0x210 [ 618.354045][T13620] netlink_sendmsg+0x6b2/0xb30 [ 618.354073][T13620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.354102][T13620] ? aa_sock_msg_perm+0x94/0x160 [ 618.354124][T13620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 618.354145][T13620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.354164][T13620] __sock_sendmsg+0x219/0x270 [ 618.354191][T13620] ____sys_sendmsg+0x505/0x830 [ 618.354216][T13620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.354246][T13620] ? import_iovec+0x74/0xa0 [ 618.354265][T13620] ___sys_sendmsg+0x21f/0x2a0 [ 618.354288][T13620] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.354341][T13620] ? __fget_files+0x2a/0x420 [ 618.354359][T13620] ? __fget_files+0x3a0/0x420 [ 618.354388][T13620] __x64_sys_sendmsg+0x19b/0x260 [ 618.354411][T13620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.354440][T13620] ? __pfx_ksys_write+0x10/0x10 [ 618.354462][T13620] ? do_syscall_64+0xbe/0x3b0 [ 618.354489][T13620] do_syscall_64+0xfa/0x3b0 [ 618.354511][T13620] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.354532][T13620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.354549][T13620] ? clear_bhb_loop+0x60/0xb0 [ 618.354570][T13620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.354586][T13620] RIP: 0033:0x7fb43018e929 [ 618.354602][T13620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.354617][T13620] RSP: 002b:00007fb430f25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.354639][T13620] RAX: ffffffffffffffda RBX: 00007fb4303b5fa0 RCX: 00007fb43018e929 [ 618.354652][T13620] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 618.354663][T13620] RBP: 00007fb430f25090 R08: 0000000000000000 R09: 0000000000000000 [ 618.354675][T13620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.354685][T13620] R13: 0000000000000000 R14: 00007fb4303b5fa0 R15: 00007fb4304dfa28 [ 618.354713][T13620] [ 618.363029][T13621] CPU: 0 UID: 0 PID: 13621 Comm: syz.0.2366 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 618.363054][T13621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.363066][T13621] Call Trace: [ 618.363073][T13621] [ 618.363081][T13621] dump_stack_lvl+0x189/0x250 [ 618.363110][T13621] ? __pfx____ratelimit+0x10/0x10 [ 618.363132][T13621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.363155][T13621] ? __pfx__printk+0x10/0x10 [ 618.363185][T13621] should_fail_ex+0x414/0x560 [ 618.363209][T13621] _copy_to_user+0x31/0xb0 [ 618.363227][T13621] sk_getsockopt+0x1a75/0x2530 [ 618.363252][T13621] ? __pfx_sk_getsockopt+0x10/0x10 [ 618.363268][T13621] ? do_syscall_64+0x40/0x3b0 [ 618.363300][T13621] ? __lock_acquire+0xab9/0xd20 [ 618.363360][T13621] do_sock_getsockopt+0x275/0x650 [ 618.363377][T13621] ? do_syscall_64+0x40/0x3b0 [ 618.363402][T13621] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 618.363419][T13621] ? do_syscall_64+0x40/0x3b0 [ 618.363440][T13621] ? __fget_files+0x3a0/0x420 [ 618.363457][T13621] ? __fget_files+0x2a/0x420 [ 618.363481][T13621] __x64_sys_getsockopt+0x1a5/0x250 [ 618.363499][T13621] ? do_syscall_64+0x40/0x3b0 [ 618.363521][T13621] ? do_syscall_64+0x40/0x3b0 [ 618.363546][T13621] do_syscall_64+0xfa/0x3b0 [ 618.363567][T13621] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.363588][T13621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.363604][T13621] ? clear_bhb_loop+0x60/0xb0 [ 618.363623][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.363639][T13621] RIP: 0033:0x7f1334b8e929 [ 618.363654][T13621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.363668][T13621] RSP: 002b:00007f13359a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 618.363686][T13621] RAX: ffffffffffffffda RBX: 00007f1334db6080 RCX: 00007f1334b8e929 [ 618.363698][T13621] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003 [ 618.363708][T13621] RBP: 00007f13359a0090 R08: 00002000000000c0 R09: 0000000000000000 [ 618.363719][T13621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.363729][T13621] R13: 0000000000000000 R14: 00007f1334db6080 R15: 00007f1334edfa28 [ 618.363756][T13621] [ 618.541448][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 618.881441][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 618.888689][ T5831] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 618.898282][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.909184][ T5831] usb 2-1: config 0 descriptor?? [ 619.107409][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 619.139552][ T5831] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 619.271484][T13630] FAULT_INJECTION: forcing a failure. [ 619.271484][T13630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.336117][T13630] CPU: 1 UID: 0 PID: 13630 Comm: syz.0.2371 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 619.336145][T13630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.336156][T13630] Call Trace: [ 619.336164][T13630] [ 619.336172][T13630] dump_stack_lvl+0x189/0x250 [ 619.336202][T13630] ? __pfx____ratelimit+0x10/0x10 [ 619.336231][T13630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.336255][T13630] ? __pfx__printk+0x10/0x10 [ 619.336274][T13630] ? __might_fault+0xb0/0x130 [ 619.336302][T13630] should_fail_ex+0x414/0x560 [ 619.336327][T13630] _copy_from_iter+0x1db/0x16f0 [ 619.336353][T13630] ? rcu_is_watching+0x15/0xb0 [ 619.336379][T13630] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 619.336398][T13630] ? __pfx__copy_from_iter+0x10/0x10 [ 619.336422][T13630] ? __build_skb_around+0x257/0x3e0 [ 619.336445][T13630] ? netlink_sendmsg+0x642/0xb30 [ 619.336461][T13630] ? skb_put+0x11b/0x210 [ 619.336482][T13630] netlink_sendmsg+0x6b2/0xb30 [ 619.336508][T13630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.336528][T13630] ? aa_sock_msg_perm+0x94/0x160 [ 619.336550][T13630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.336570][T13630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.336589][T13630] __sock_sendmsg+0x219/0x270 [ 619.336615][T13630] ____sys_sendmsg+0x505/0x830 [ 619.336641][T13630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.336668][T13630] ? import_iovec+0x74/0xa0 [ 619.336687][T13630] ___sys_sendmsg+0x21f/0x2a0 [ 619.336709][T13630] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.336761][T13630] ? __fget_files+0x2a/0x420 [ 619.336778][T13630] ? __fget_files+0x3a0/0x420 [ 619.336805][T13630] __x64_sys_sendmsg+0x19b/0x260 [ 619.336828][T13630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.336856][T13630] ? __pfx_ksys_write+0x10/0x10 [ 619.336868][T13630] ? rcu_is_watching+0x15/0xb0 [ 619.336896][T13630] ? do_syscall_64+0xbe/0x3b0 [ 619.336922][T13630] do_syscall_64+0xfa/0x3b0 [ 619.336943][T13630] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.336964][T13630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.336980][T13630] ? clear_bhb_loop+0x60/0xb0 [ 619.337000][T13630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.337016][T13630] RIP: 0033:0x7f1334b8e929 [ 619.337032][T13630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.337047][T13630] RSP: 002b:00007f13359c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.337066][T13630] RAX: ffffffffffffffda RBX: 00007f1334db5fa0 RCX: 00007f1334b8e929 [ 619.337077][T13630] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 619.337088][T13630] RBP: 00007f13359c1090 R08: 0000000000000000 R09: 0000000000000000 [ 619.337100][T13630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.337110][T13630] R13: 0000000000000000 R14: 00007f1334db5fa0 R15: 00007f1334edfa28 [ 619.337142][T13630] [ 619.581588][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 619.644238][T13635] FAULT_INJECTION: forcing a failure. [ 619.644238][T13635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.666040][T13635] CPU: 0 UID: 0 PID: 13635 Comm: syz.4.2373 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 619.666069][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.666080][T13635] Call Trace: [ 619.666088][T13635] [ 619.666096][T13635] dump_stack_lvl+0x189/0x250 [ 619.666126][T13635] ? __pfx____ratelimit+0x10/0x10 [ 619.666150][T13635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.666182][T13635] ? __pfx__printk+0x10/0x10 [ 619.666201][T13635] ? __might_fault+0xb0/0x130 [ 619.666229][T13635] should_fail_ex+0x414/0x560 [ 619.666254][T13635] _copy_from_iter+0x1db/0x16f0 [ 619.666281][T13635] ? rcu_is_watching+0x15/0xb0 [ 619.666306][T13635] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 619.666324][T13635] ? __pfx__copy_from_iter+0x10/0x10 [ 619.666348][T13635] ? __build_skb_around+0x257/0x3e0 [ 619.666370][T13635] ? netlink_sendmsg+0x642/0xb30 [ 619.666388][T13635] ? skb_put+0x11b/0x210 [ 619.666408][T13635] netlink_sendmsg+0x6b2/0xb30 [ 619.666436][T13635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.666457][T13635] ? aa_sock_msg_perm+0x94/0x160 [ 619.666480][T13635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.666500][T13635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.666520][T13635] __sock_sendmsg+0x219/0x270 [ 619.666545][T13635] ____sys_sendmsg+0x505/0x830 [ 619.666571][T13635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.666598][T13635] ? import_iovec+0x74/0xa0 [ 619.666618][T13635] ___sys_sendmsg+0x21f/0x2a0 [ 619.666639][T13635] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.666693][T13635] ? __fget_files+0x2a/0x420 [ 619.666711][T13635] ? __fget_files+0x3a0/0x420 [ 619.666739][T13635] __x64_sys_sendmsg+0x19b/0x260 [ 619.666762][T13635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.666791][T13635] ? __pfx_ksys_write+0x10/0x10 [ 619.666812][T13635] ? do_syscall_64+0xbe/0x3b0 [ 619.666838][T13635] do_syscall_64+0xfa/0x3b0 [ 619.666862][T13635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.666877][T13635] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.666894][T13635] ? clear_bhb_loop+0x60/0xb0 [ 619.666914][T13635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.666929][T13635] RIP: 0033:0x7fe00398e929 [ 619.666945][T13635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.666960][T13635] RSP: 002b:00007fe00481e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.666978][T13635] RAX: ffffffffffffffda RBX: 00007fe003bb5fa0 RCX: 00007fe00398e929 [ 619.666991][T13635] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 619.667002][T13635] RBP: 00007fe00481e090 R08: 0000000000000000 R09: 0000000000000000 [ 619.667013][T13635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.667023][T13635] R13: 0000000000000000 R14: 00007fe003bb5fa0 R15: 00007fe003cdfa28 [ 619.667051][T13635] [ 619.667385][ T5831] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 619.795088][T13638] netlink: 'syz.2.2374': attribute type 1 has an invalid length. [ 619.883669][T13640] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2374'. [ 619.939502][T13638] bond1: entered promiscuous mode [ 619.990949][T13638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.006301][T13640] batadv1: entered promiscuous mode [ 620.012681][T13640] batadv1: entered allmulticast mode [ 620.020100][T13640] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 620.029005][T13640] bond1: (slave batadv1): making interface the new active one [ 620.040560][T13640] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 620.078625][ T5831] asix 2-1:0.0: probe with driver asix failed with error -32 [ 620.110636][T13638] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2374'. [ 620.113410][ T5891] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 620.156191][T13638] batadv2: entered promiscuous mode [ 620.170383][T13638] batadv2: entered allmulticast mode [ 620.177239][T13638] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 620.224653][T13638] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 620.294233][ T5891] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 620.308804][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.319151][ T5891] usb 4-1: Product: syz [ 620.329052][ T5891] usb 4-1: Manufacturer: syz [ 620.347107][ T5891] usb 4-1: SerialNumber: syz [ 620.621429][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 620.622972][T13650] vivid-000: disconnect [ 620.736982][ T5891] usb 4-1: config 0 descriptor?? [ 620.763132][ T5891] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 621.034734][T13643] vivid-000: reconnect [ 621.280369][ T5831] delete_channel: no stack [ 621.315738][T13655] sctp: [Deprecated]: syz.2.2378 (pid 13655) Use of int in maxseg socket option. [ 621.315738][T13655] Use struct sctp_assoc_value instead [ 621.401521][ T43] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 621.439942][ T5831] usb 2-1: USB disconnect, device number 75 [ 621.533329][ T30] audit: type=1326 audit(1751472985.307:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859b98e929 code=0x7ffc0000 [ 621.563372][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 621.581115][ T43] usb 5-1: config index 0 descriptor too short (expected 30235, got 27) [ 621.591944][ T30] audit: type=1326 audit(1751472985.327:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859b98e929 code=0x7ffc0000 [ 621.606561][ T43] usb 5-1: config 113 has too many interfaces: 83, using maximum allowed: 32 [ 621.640657][ T43] usb 5-1: config 113 has an invalid descriptor of length 71, skipping remainder of the config [ 621.640663][ T30] audit: type=1326 audit(1751472985.327:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f859b98d290 code=0x7ffc0000 [ 621.640706][ T30] audit: type=1326 audit(1751472985.327:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f859b98d290 code=0x7ffc0000 [ 621.658213][ T43] usb 5-1: config 113 has 0 interfaces, different from the descriptor's value: 83 [ 621.674112][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 621.675095][ T30] audit: type=1326 audit(1751472985.337:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859b98e929 code=0x7ffc0000 [ 621.720506][T13665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2382'. [ 621.769483][ T30] audit: type=1326 audit(1751472985.337:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859b98e929 code=0x7ffc0000 [ 621.841160][ T30] audit: type=1326 audit(1751472985.337:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f859b98e929 code=0x7ffc0000 [ 621.866505][ T43] usb 5-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 621.872668][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'. [ 621.876904][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.909189][ T43] usb 5-1: Product: syz [ 621.914400][ T43] usb 5-1: Manufacturer: syz [ 621.920379][ T30] audit: type=1326 audit(1751472985.337:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859b98e929 code=0x7ffc0000 [ 621.950213][ T43] usb 5-1: SerialNumber: syz [ 621.958873][ T30] audit: type=1326 audit(1751472985.337:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859b98e929 code=0x7ffc0000 [ 622.048524][ T30] audit: type=1326 audit(1751472985.337:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f859b98e929 code=0x7ffc0000 [ 622.087631][ T5891] gspca_sunplus: reg_r err -71 [ 622.092948][ T5891] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 622.138147][ T5891] usb 4-1: USB disconnect, device number 90 [ 622.152438][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2381'. [ 622.701437][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 622.736507][ T43] usb 5-1: USB disconnect, device number 98 [ 622.801436][ T5891] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 622.981647][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 622.988103][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 623.013186][ T5891] usb 1-1: config 5 has an invalid interface number: 52 but max is 0 [ 623.032444][ T5891] usb 1-1: config 5 has no interface number 0 [ 623.059148][ T5891] usb 1-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 623.074685][ T5891] usb 1-1: string descriptor 0 read error: -22 [ 623.091671][ T5891] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 623.117202][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.131538][ T5906] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 623.148969][T13684] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 623.215955][ T5891] aircable 1-1:5.52: aircable converter detected [ 623.225267][T13692] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[13692] [ 623.435901][ T5891] usb 1-1: aircable converter now attached to ttyUSB0 [ 623.446055][ T5891] usb 1-1: USB disconnect, device number 108 [ 623.457613][ T5891] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 623.466430][ T5906] usb 4-1: too many configurations: 61, using maximum allowed: 8 [ 623.466436][ T5891] aircable 1-1:5.52: device disconnected [ 623.509805][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.603002][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.639031][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.653177][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.726151][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.739111][T13696] binder: 13695:13696 ioctl c0306201 2000000003c0 returned -14 [ 623.746968][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 623.747220][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.765546][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.798799][T13699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.841425][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.894688][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.908002][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.922644][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.933528][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.945280][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.955776][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.972759][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.983406][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.995268][ T5906] usb 4-1: New USB device found, idVendor=1d6b, idProduct=ecd1, bcdDevice=e9.02 [ 624.006423][ T5906] usb 4-1: New USB device strings: Mfr=46, Product=133, SerialNumber=240 [ 624.028434][ T5906] usb 4-1: Product: syz [ 624.041861][ T5891] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 624.056080][ T5906] usb 4-1: Manufacturer: syz [ 624.068034][ T5906] usb 4-1: SerialNumber: syz [ 624.177089][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'. [ 624.213524][ T5891] usb 5-1: config 8 has an invalid interface number: 169 but max is 0 [ 624.231860][ T5891] usb 5-1: config 8 has no interface number 0 [ 624.255249][ T5891] usb 5-1: config 8 interface 169 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 624.298661][ T5906] usb 4-1: USB disconnect, device number 91 [ 624.300035][ T5891] usb 5-1: config 8 interface 169 has no altsetting 0 [ 624.321747][ T5891] usb 5-1: New USB device found, idVendor=05ac, idProduct=9222, bcdDevice= f.a9 [ 624.337387][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.348772][ T5891] usb 5-1: Product: syz [ 624.355884][ T5891] usb 5-1: Manufacturer: syz [ 624.362419][ T5891] usb 5-1: SerialNumber: syz [ 624.449621][ T5891] appledisplay 5-1:8.169: Could not find int-in endpoint [ 624.477533][ T5891] usbhid 5-1:8.169: couldn't find an input interrupt endpoint [ 624.545114][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.554884][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.602911][ T5891] usb 5-1: USB disconnect, device number 99 [ 624.781429][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 624.891613][ T5831] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 625.051511][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 625.058637][ T5831] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 625.068309][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.092129][ T5831] usb 3-1: config 0 descriptor?? [ 625.110470][ T5831] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 625.320177][ T5831] usb 3-1: Detected FT232B [ 625.535341][ T5831] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 625.567472][ T5831] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 625.769012][T13712] netlink: 'syz.2.2394': attribute type 8 has an invalid length. [ 625.821536][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 626.169345][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.252222][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.291995][ T5906] usb 3-1: USB disconnect, device number 82 [ 626.320445][ T5906] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 626.366624][T13753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2405'. [ 626.406575][ T5906] ftdi_sio 3-1:0.0: device disconnected [ 626.430993][ T2956] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 626.451953][ T977] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 626.476905][ T2956] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 626.611747][ T5906] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 626.621925][ T5906] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 626.795225][T13763] ALSA: mixer_oss: invalid OSS volume '' [ 626.801155][T13763] ALSA: mixer_oss: invalid OSS volume 'àœƒñâÏ­×¢ƒ÷I;oš˜jdÐx&_®ú_' [ 626.810135][T13763] ALSA: mixer_oss: invalid OSS volume '¨Õûé' [ 626.861450][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 626.901489][ T5906] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 627.101738][ T5906] usb 3-1: config 0 has no interfaces? [ 627.125542][ T5906] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 627.145915][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.214820][ T5906] usb 3-1: Product: syz [ 627.355344][ T5906] usb 3-1: Manufacturer: syz [ 627.396097][ T5906] usb 3-1: SerialNumber: syz [ 627.442590][ T5906] usb 3-1: config 0 descriptor?? [ 627.765050][T13762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.777678][T13762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.911434][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 628.489079][T13773] syz_tun: entered promiscuous mode [ 628.603375][T13773] batadv_slave_0: entered promiscuous mode [ 628.641552][T13780] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 628.687476][T13780] netlink: 'syz.4.2410': attribute type 4 has an invalid length. [ 628.728413][T13773] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 628.793167][T13773] Cannot create hsr debugfs directory [ 628.836444][T13773] hsr1: entered allmulticast mode [ 628.872068][T13773] syz_tun: entered allmulticast mode [ 628.879427][T13773] batadv_slave_0: entered allmulticast mode [ 628.941453][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 629.007687][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2408'. [ 629.701927][ T10] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 629.866041][ T977] usb 3-1: USB disconnect, device number 83 [ 629.873713][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 629.883459][ T10] usb 5-1: config 0 has no interface number 0 [ 629.926202][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 629.991451][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 630.100169][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 630.164546][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 630.220945][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.312714][ T10] usb 5-1: config 0 descriptor?? [ 630.354086][T13798] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 630.381753][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 630.409425][ T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 630.474335][T13809] fuse: Bad value for 'fd' [ 630.486565][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 630.663740][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2415'. [ 630.676337][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2415'. [ 630.717957][T13798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.780871][T13798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.869126][ T5906] usb 5-1: USB disconnect, device number 100 [ 631.021429][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 631.699922][T13827] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[13827] [ 631.716656][T13828] FAULT_INJECTION: forcing a failure. [ 631.716656][T13828] name failslab, interval 1, probability 0, space 0, times 0 [ 631.758975][T13828] CPU: 0 UID: 0 PID: 13828 Comm: syz.2.2425 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 631.758997][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 631.759007][T13828] Call Trace: [ 631.759015][T13828] [ 631.759024][T13828] dump_stack_lvl+0x189/0x250 [ 631.759051][T13828] ? __pfx____ratelimit+0x10/0x10 [ 631.759075][T13828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.759099][T13828] ? __pfx__printk+0x10/0x10 [ 631.759131][T13828] should_fail_ex+0x414/0x560 [ 631.759156][T13828] should_failslab+0xa8/0x100 [ 631.759178][T13828] __kmalloc_cache_noprof+0x70/0x3d0 [ 631.759196][T13828] ? sctp_add_bind_addr+0x8c/0x370 [ 631.759226][T13828] sctp_add_bind_addr+0x8c/0x370 [ 631.759255][T13828] sctp_copy_local_addr_list+0x30b/0x4e0 [ 631.759284][T13828] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 631.759308][T13828] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 631.759334][T13828] ? sctp_v6_is_any+0x64/0x80 [ 631.759353][T13828] ? sctp_copy_one_addr+0x93/0x360 [ 631.759380][T13828] sctp_bind_addr_copy+0xb3/0x3c0 [ 631.759405][T13828] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 631.759430][T13828] sctp_connect_new_asoc+0x2e0/0x690 [ 631.759454][T13828] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 631.759472][T13828] ? __local_bh_enable_ip+0x12d/0x1c0 [ 631.759502][T13828] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 631.759524][T13828] ? security_sctp_bind_connect+0x7e/0x2e0 [ 631.759544][T13828] sctp_sendmsg+0x155c/0x2810 [ 631.759575][T13828] ? __pfx_sctp_sendmsg+0x10/0x10 [ 631.759596][T13828] ? aa_sk_perm+0x81e/0x950 [ 631.759618][T13828] ? __pfx_aa_sk_perm+0x10/0x10 [ 631.759637][T13828] ? sock_rps_record_flow+0x19/0x410 [ 631.759670][T13828] ? inet_sendmsg+0x2f4/0x370 [ 631.759696][T13828] __sock_sendmsg+0x19c/0x270 [ 631.759723][T13828] __sys_sendto+0x3bd/0x520 [ 631.759744][T13828] ? __pfx___sys_sendto+0x10/0x10 [ 631.759759][T13828] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 631.759796][T13828] ? __fget_files+0x3a0/0x420 [ 631.759825][T13828] ? ksys_write+0x22a/0x250 [ 631.759843][T13828] ? __pfx_ksys_write+0x10/0x10 [ 631.759857][T13828] ? rcu_is_watching+0x15/0xb0 [ 631.759884][T13828] __x64_sys_sendto+0xde/0x100 [ 631.759906][T13828] do_syscall_64+0xfa/0x3b0 [ 631.759927][T13828] ? lockdep_hardirqs_on+0x9c/0x150 [ 631.759948][T13828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.759965][T13828] ? clear_bhb_loop+0x60/0xb0 [ 631.759986][T13828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.760002][T13828] RIP: 0033:0x7f472ed8e929 [ 631.760017][T13828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.760031][T13828] RSP: 002b:00007f472fc2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 631.760049][T13828] RAX: ffffffffffffffda RBX: 00007f472efb5fa0 RCX: 00007f472ed8e929 [ 631.760060][T13828] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000003 [ 631.760071][T13828] RBP: 00007f472fc2e090 R08: 0000200000000100 R09: 000000000000001c [ 631.760083][T13828] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 631.760092][T13828] R13: 0000000000000000 R14: 00007f472efb5fa0 R15: 00007f472f0dfa28 [ 631.760122][T13828] [ 632.084926][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 632.901653][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 633.111430][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 633.145570][T13846] gtp0: entered promiscuous mode [ 633.231662][T13846] gtp0: entered allmulticast mode [ 633.319603][T13850] netlink: 'syz.4.2430': attribute type 4 has an invalid length. [ 633.337853][ T10] usb 3-1: config 0 has no interfaces? [ 633.371331][T13850] netlink: 'syz.4.2430': attribute type 4 has an invalid length. [ 633.422580][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 633.536538][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.591475][ T977] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 634.296550][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.315319][ T977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 634.329795][ T977] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 634.373872][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.394066][ T977] usb 4-1: Product: syz [ 634.398481][ T977] usb 4-1: Manufacturer: syz [ 634.408909][ T977] usb 4-1: SerialNumber: syz [ 634.437666][ T977] usb 4-1: config 0 descriptor?? [ 634.451186][ T977] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 634.496862][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 634.515584][ T977] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 634.529480][ T977] usb 4-1: media controller created [ 634.578691][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 634.718055][ T977] DVB: Unable to find symbol tda10046_attach() [ 634.728774][ T977] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 634.740498][ T977] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 635.165010][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 635.165029][ T30] audit: type=1326 audit(1751472998.937:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 635.193834][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.209314][ T30] audit: type=1326 audit(1751472998.937:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 635.232640][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.249356][ T30] audit: type=1326 audit(1751472998.937:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 635.281763][ T30] audit: type=1326 audit(1751472998.937:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb43018e52b code=0x7ffc0000 [ 635.314645][ T30] audit: type=1326 audit(1751472998.937:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb43018e52b code=0x7ffc0000 [ 635.345565][ T30] audit: type=1326 audit(1751472998.967:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4301c11e5 code=0x7ffc0000 [ 635.401261][ T30] audit: type=1326 audit(1751472999.167:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43018e929 code=0x7ffc0000 [ 637.429342][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 637.436808][ T30] audit: type=1326 audit(1751472999.197:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb43018e52b code=0x7ffc0000 [ 637.460832][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.460844][ T10] usb 3-1: Product: syz [ 637.460861][ T10] usb 3-1: Manufacturer: syz [ 637.460874][ T10] usb 3-1: SerialNumber: syz [ 637.481453][ T30] audit: type=1326 audit(1751472999.197:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb43018e52b code=0x7ffc0000 [ 637.504541][ T30] audit: type=1326 audit(1751472999.197:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4301c11e5 code=0x7ffc0000 [ 637.527225][ C1] vkms_vblank_simulate: vblank timer overrun [ 641.677007][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 641.677740][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 644.716114][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 648.812226][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 648.858685][ T977] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 652.962655][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 655.027717][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 655.036174][ T10] usb 3-1: config 0 descriptor?? [ 657.084107][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 657.274171][ T10] usb 3-1: can't set config #0, error -71 [ 657.372378][ T10] usb 3-1: USB disconnect, device number 84 [ 658.141759][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 662.714852][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 662.716608][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 664.816798][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 664.861714][ T5151] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 674.075562][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 674.128371][T13857] sched: DL replenish lagged too much [ 678.117965][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 678.126879][ T10] usb 4-1: USB disconnect, device number 92 [ 682.503304][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 684.927286][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 687.152459][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 687.199734][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.206249][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.197927][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 692.253280][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 692.381727][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 699.603505][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 703.735924][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 705.776617][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 707.809561][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 711.025016][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 713.079296][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 715.360838][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 717.516354][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 732.794880][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 736.882889][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 742.946400][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 747.047685][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 751.147783][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 753.189816][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 755.240549][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 755.241709][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 758.292420][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.299287][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.396184][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 762.425567][T13867] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 762.445306][ T8880] syz_tun (unregistering): left promiscuous mode [ 764.599573][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 764.607560][ T5842] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 764.614670][ T5151] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 767.625267][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 769.680715][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 770.701513][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 771.741692][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 776.239473][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 778.275871][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 781.284006][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 784.323337][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 798.575936][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 800.618161][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 803.631363][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 807.650237][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 808.701476][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 809.741455][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 812.081525][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 814.122103][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 816.157723][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 816.177913][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.184331][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 821.236002][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 825.334921][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 825.688768][ T31] INFO: task syz-executor:13868 blocked for more than 149 seconds. [ 825.701209][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 825.709202][T13870] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 825.716317][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 825.732534][ T31] task:syz-executor state:D stack:24104 pid:13868 tgid:13868 ppid:5818 task_flags:0x400100 flags:0x00004000 [ 825.751372][ T31] Call Trace: [ 825.754703][ T31] [ 825.757645][ T31] __schedule+0x16f5/0x4d00 [ 825.768117][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 825.773432][ T31] ? schedule+0x165/0x360 [ 825.777777][ T31] ? __pfx___schedule+0x10/0x10 [ 825.782961][ T31] ? schedule+0x91/0x360 [ 825.787221][ T31] schedule+0x165/0x360 [ 825.791669][ T31] schedule_timeout+0x9a/0x270 [ 825.796619][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 825.802203][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 825.807413][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 825.812692][ T31] ? wait_for_completion+0x267/0x5d0 [ 825.817990][ T31] wait_for_completion+0x2bf/0x5d0 [ 825.823500][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 825.829149][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 825.835140][ T31] ? check_flush_dependency+0x23a/0x400 [ 825.840724][ T31] __flush_workqueue+0x6f7/0x14b0 [ 825.845817][ T31] ? __pfx_work_grab_pending+0x10/0x10 [ 825.851288][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 825.857418][ T31] ? __cancel_work+0x1e6/0x2e0 [ 825.862248][ T31] ? __pfx___cancel_work+0x10/0x10 [ 825.867371][ T31] ? _raw_read_unlock+0x28/0x50 [ 825.872269][ T31] ? __hci_dev_get+0x144/0x220 [ 825.877045][ T31] hci_dev_open+0x145/0x300 [ 825.881847][ T31] sock_do_ioctl+0xd9/0x300 [ 825.886367][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 825.891627][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.896537][ T31] sock_ioctl+0x576/0x790 [ 825.900905][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 825.905822][ T31] ? __fget_files+0x2a/0x420 [ 825.910424][ T31] ? __fget_files+0x3a0/0x420 [ 825.915397][ T31] ? __fget_files+0x2a/0x420 [ 825.920002][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 825.924995][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 825.929859][ T31] __se_sys_ioctl+0xf9/0x170 [ 825.934520][ T31] do_syscall_64+0xfa/0x3b0 [ 825.939040][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 825.944556][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.950645][ T31] ? clear_bhb_loop+0x60/0xb0 [ 825.955377][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.961280][ T31] RIP: 0033:0x7f96f718e52b [ 825.965750][ T31] RSP: 002b:00007fffad8ef2b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.974457][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f96f718e52b [ 825.982569][ T31] RDX: 0000000000000006 RSI: 00000000400448c9 RDI: 0000000000000003 [ 825.990638][ T31] RBP: 00007fffad8ef31c R08: 0000000000000000 R09: 00007fffad8ef227 [ 825.998652][ T31] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000006 [ 826.006909][ T31] R13: 0000000000000006 R14: 0000000000000009 R15: 0000000000000000 [ 826.014961][ T31] [ 826.017989][ T31] INFO: task syz-executor:13871 blocked for more than 149 seconds. [ 826.025924][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 826.033853][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 826.042721][ T31] task:syz-executor state:D stack:24104 pid:13871 tgid:13871 ppid:5818 task_flags:0x400100 flags:0x00004000 [ 826.054700][ T31] Call Trace: [ 826.057991][ T31] [ 826.060931][ T31] __schedule+0x16f5/0x4d00 [ 826.065750][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 826.070992][ T31] ? schedule+0x165/0x360 [ 826.075472][ T31] ? __pfx___schedule+0x10/0x10 [ 826.080389][ T31] ? schedule+0x91/0x360 [ 826.084723][ T31] schedule+0x165/0x360 [ 826.088935][ T31] schedule_timeout+0x9a/0x270 [ 826.094156][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 826.099573][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 826.104867][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.110102][ T31] ? wait_for_completion+0x267/0x5d0 [ 826.115457][ T31] wait_for_completion+0x2bf/0x5d0 [ 826.120601][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 826.126556][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 826.132430][ T31] ? check_flush_dependency+0x23a/0x400 [ 826.137989][ T31] __flush_workqueue+0x6f7/0x14b0 [ 826.143086][ T31] ? __pfx_work_grab_pending+0x10/0x10 [ 826.148565][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 826.154318][ T31] ? __cancel_work+0x1e6/0x2e0 [ 826.159104][ T31] ? __pfx___cancel_work+0x10/0x10 [ 826.164271][ T31] ? _raw_read_unlock+0x28/0x50 [ 826.169133][ T31] ? __hci_dev_get+0x144/0x220 [ 826.173948][ T31] hci_dev_open+0x145/0x300 [ 826.178466][ T31] sock_do_ioctl+0xd9/0x300 [ 826.183271][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 826.188398][ T31] ? __lock_acquire+0xab9/0xd20 [ 826.193327][ T31] sock_ioctl+0x576/0x790 [ 826.197674][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 826.202589][ T31] ? __fget_files+0x2a/0x420 [ 826.207193][ T31] ? __fget_files+0x3a0/0x420 [ 826.212250][ T31] ? __fget_files+0x2a/0x420 [ 826.216981][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 826.221967][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 826.226833][ T31] __se_sys_ioctl+0xf9/0x170 [ 826.231491][ T31] do_syscall_64+0xfa/0x3b0 [ 826.236098][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.241306][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.247690][ T31] ? clear_bhb_loop+0x60/0xb0 [ 826.252617][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.258528][ T31] RIP: 0033:0x7f470d58e52b [ 826.263016][ T31] RSP: 002b:00007ffdda743660 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 826.271801][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f470d58e52b [ 826.279792][ T31] RDX: 0000000000000007 RSI: 00000000400448c9 RDI: 0000000000000003 [ 826.287840][ T31] RBP: 00007ffdda7436cc R08: 0000000000000000 R09: 00007ffdda7435d7 [ 826.301898][ T31] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000007 [ 826.309957][ T31] R13: 0000000000000007 R14: 0000000000000009 R15: 0000000000000000 [ 826.331785][ T31] [ 826.334884][ T31] [ 826.334884][ T31] Showing all locks held in the system: [ 826.355868][ T31] 1 lock held by khungtaskd/31: [ 826.360763][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 826.371022][ T31] 4 locks held by kworker/u8:3/49: [ 826.376374][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 826.387395][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 826.394769][ T31] #1: ffffc90000b97bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 826.405557][ T31] #2: ffffffff8f502bd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 826.415580][ T31] #3: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 826.451729][ T31] 3 locks held by kworker/u8:4/59: [ 826.456887][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 826.484398][ T31] #1: ffffc9000210fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 826.500075][ T31] #2: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 826.509352][ T31] 3 locks held by kworker/u8:7/2956: [ 826.515094][ T31] #0: ffff888030498148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 826.526782][ T31] #1: ffffc9000bd0fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 826.540516][ T31] #2: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 826.550486][ T31] 3 locks held by kworker/u9:1/5151: [ 826.555870][ T31] #0: ffff888056a6d948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 826.566743][ T31] #1: ffffc9000fad7bc0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 826.579201][ T31] #2: ffff88807c1b8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x680 [ 826.588689][ T31] 2 locks held by getty/5590: [ 826.593391][ T31] #0: ffff8880305a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 826.603575][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 826.613750][ T31] 2 locks held by kworker/0:3/5831: [ 826.619122][ T31] 3 locks held by kworker/u9:5/5842: [ 826.624481][ T31] #0: ffff88807ef06948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 826.635581][ T31] #1: ffffc900041efbc0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 826.647951][ T31] #2: ffff888037214dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x680 [ 826.657413][ T31] 7 locks held by kworker/1:4/5899: [ 826.662978][ T31] 3 locks held by kworker/1:5/5906: [ 826.668175][ T31] 1 lock held by syz.4.370/6876: [ 826.673154][ T31] #0: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 826.682249][ T31] 1 lock held by syz.2.1458/10401: [ 826.687361][ T31] #0: ffffffff8e144800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 826.697601][ T31] 1 lock held by syz.1.1585/10853: [ 826.702755][ T31] #0: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 826.716101][ T31] 1 lock held by syz.0.2433/13862: [ 826.721232][ T31] #0: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 826.730544][ T31] 1 lock held by syz-executor/13867: [ 826.735945][ T31] #0: ffff888035b04dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_open+0x1f3/0x300 [ 826.745413][ T31] 3 locks held by kworker/u9:0/13870: [ 826.750800][ T31] #0: ffff888056a68948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 826.761958][ T31] #1: ffffc90003077bc0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 826.774111][ T31] #2: ffff888037210dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x680 [ 826.784346][ T31] 3 locks held by kworker/u9:2/13892: [ 826.789721][ T31] #0: ffff88802f843148 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 826.801061][ T31] #1: ffffc9000bc6fbc0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 826.813234][ T31] #2: ffff88807c1bcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x680 [ 826.823191][ T31] 2 locks held by dhcpcd/13894: [ 826.828042][ T31] #0: ffff88807b58e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 826.837957][ T31] #1: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 826.848914][ T31] 2 locks held by dhcpcd/13895: [ 826.854566][ T31] #0: ffff88807a7a2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 826.864295][ T31] #1: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 826.875293][ T31] [ 826.877633][ T31] ============================================= [ 826.877633][ T31] [ 826.886517][ T31] NMI backtrace for cpu 0 [ 826.886536][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 826.886586][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 826.886611][ T31] Call Trace: [ 826.886629][ T31] [ 826.886649][ T31] dump_stack_lvl+0x189/0x250 [ 826.886709][ T31] ? __wake_up_klogd+0xd9/0x110 [ 826.886762][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.886824][ T31] ? __pfx__printk+0x10/0x10 [ 826.886899][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 826.886957][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 826.887000][ T31] ? _printk+0xcf/0x120 [ 826.887056][ T31] ? __pfx__printk+0x10/0x10 [ 826.887088][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 826.887113][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 826.887136][ T31] watchdog+0xfee/0x1030 [ 826.887160][ T31] ? watchdog+0x1de/0x1030 [ 826.887188][ T31] kthread+0x70e/0x8a0 [ 826.887211][ T31] ? __pfx_watchdog+0x10/0x10 [ 826.887231][ T31] ? __pfx_kthread+0x10/0x10 [ 826.887252][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 826.887275][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.887301][ T31] ? __pfx_kthread+0x10/0x10 [ 826.887321][ T31] ret_from_fork+0x3fc/0x770 [ 826.887347][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 826.887375][ T31] ? __switch_to_asm+0x39/0x70 [ 826.887392][ T31] ? __switch_to_asm+0x33/0x70 [ 826.887407][ T31] ? __pfx_kthread+0x10/0x10 [ 826.887427][ T31] ret_from_fork_asm+0x1a/0x30 [ 826.887467][ T31] [ 826.887474][ T31] Sending NMI from CPU 0 to CPUs 1: [ 827.045786][ C1] NMI backtrace for cpu 1 [ 827.045801][ C1] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:4 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 827.045821][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 827.045833][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 827.045858][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 827.045879][ C1] Code: 08 00 9d 92 65 8b 15 78 b1 dc 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 00 <83> fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c [ 827.045894][ C1] RSP: 0018:ffffc9000518f038 EFLAGS: 00000246 [ 827.045907][ C1] RAX: ffffffff898402c6 RBX: ffff888028bd3348 RCX: ffff888030dc5a00 [ 827.045919][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 827.045928][ C1] RBP: ffffc9000518f1d0 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e [ 827.045940][ C1] R10: dffffc0000000000 R11: ffffffff81679410 R12: ffff888028bd3338 [ 827.045953][ C1] R13: dffffc0000000000 R14: ffff888028bd3358 R15: 0000000000000001 [ 827.045965][ C1] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 827.045978][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.045989][ C1] CR2: 00005591bcf6cfb0 CR3: 00000000328f2000 CR4: 00000000003526f0 [ 827.046004][ C1] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 827.046014][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 827.046024][ C1] Call Trace: [ 827.046033][ C1] [ 827.046040][ C1] fq_dequeue+0x816/0x2650 [ 827.046074][ C1] ? __pfx_fq_dequeue+0x10/0x10 [ 827.046093][ C1] ? __lock_acquire+0xab9/0xd20 [ 827.046117][ C1] __qdisc_run+0x239/0x15f0 [ 827.046141][ C1] __dev_queue_xmit+0xfe1/0x3a70 [ 827.046172][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 827.046191][ C1] ? ip6t_do_table+0x1db/0x1560 [ 827.046211][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 827.046231][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 827.046254][ C1] ? ip6table_mangle_hook+0x2a2/0x6c0 [ 827.046276][ C1] ? __lock_acquire+0xab9/0xd20 [ 827.046305][ C1] ? ip6_finish_output2+0xf99/0x16a0 [ 827.046327][ C1] ip6_finish_output2+0x11bc/0x16a0 [ 827.046348][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 827.046370][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 827.046389][ C1] ? ip6_mtu+0x7d/0x3f0 [ 827.046407][ C1] ? ip6_mtu+0x7d/0x3f0 [ 827.046424][ C1] ip6_finish_output+0x234/0x7d0 [ 827.046443][ C1] udp_tunnel6_xmit_skb+0x5da/0xa60 [ 827.046467][ C1] send6+0x5aa/0x8d0 [ 827.046490][ C1] ? send6+0x220/0x8d0 [ 827.046512][ C1] ? __pfx_send6+0x10/0x10 [ 827.046530][ C1] ? wg_socket_send_skb_to_peer+0x54/0x1d0 [ 827.046560][ C1] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 827.046583][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 827.046603][ C1] ? wg_packet_tx_worker+0x24a/0x7c0 [ 827.046622][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.046642][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 827.046665][ C1] process_scheduled_works+0xade/0x17b0 [ 827.046700][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 827.046729][ C1] worker_thread+0x8a0/0xda0 [ 827.046764][ C1] kthread+0x70e/0x8a0 [ 827.046782][ C1] ? __pfx_worker_thread+0x10/0x10 [ 827.046803][ C1] ? __pfx_kthread+0x10/0x10 [ 827.046820][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.046839][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.046858][ C1] ? __pfx_kthread+0x10/0x10 [ 827.046875][ C1] ret_from_fork+0x3fc/0x770 [ 827.046897][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 827.046920][ C1] ? __switch_to_asm+0x39/0x70 [ 827.046935][ C1] ? __switch_to_asm+0x33/0x70 [ 827.046949][ C1] ? __pfx_kthread+0x10/0x10 [ 827.046966][ C1] ret_from_fork_asm+0x1a/0x30 [ 827.046989][ C1] [ 827.421443][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 827.448601][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 827.455496][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 827.467388][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 827.477537][ T31] Call Trace: [ 827.480838][ T31] [ 827.483801][ T31] dump_stack_lvl+0x99/0x250 [ 827.488425][ T31] ? __asan_memcpy+0x40/0x70 [ 827.493027][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.498273][ T31] ? __pfx__printk+0x10/0x10 [ 827.502883][ T31] panic+0x2db/0x790 [ 827.506793][ T31] ? __pfx_panic+0x10/0x10 [ 827.511220][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 827.517040][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 827.522421][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 827.528594][ T31] watchdog+0x102d/0x1030 [ 827.532936][ T31] ? watchdog+0x1de/0x1030 [ 827.537384][ T31] kthread+0x70e/0x8a0 [ 827.541463][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.546156][ T31] ? __pfx_kthread+0x10/0x10 [ 827.550753][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.555957][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.561162][ T31] ? __pfx_kthread+0x10/0x10 [ 827.565860][ T31] ret_from_fork+0x3fc/0x770 [ 827.570474][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 827.575606][ T31] ? __switch_to_asm+0x39/0x70 [ 827.580457][ T31] ? __switch_to_asm+0x33/0x70 [ 827.585225][ T31] ? __pfx_kthread+0x10/0x10 [ 827.589822][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.594602][ T31] [ 827.597872][ T31] Kernel Offset: disabled [ 827.602286][ T31] Rebooting in 86400 seconds..